KLA10592 Denial of service vulnerability in PostgreSQL

Multiple serious vulnerabilities have been found in PostgreSQL. Malicious users can exploit these vulnerabilities to cause denial of service or conduct some other impact.

Below is a complete list of vulnerabilities

1. Double free vulnerability can be exploited remotely via SSL session manipulations;
2. Multiple errors can be exploited remotely via vectors related to pgcrypto and other unknown vectors.

Original advisories

PostrgeSQL blog entry

Related products

PostgreSQL

CVE list

CVE-2015-3165 warning

Solution

Update to the latest version

Get PostgreSQL

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• PostgreSQL versions earlier than 9.0.20PostgreSQL 9.1 versions earlier than 9.1.16PostgreSQL 9.2 versions earlier than 9.2.11PostgreSQL 9.3 versions earlier than 9.3.7PostgreSQL 9.4 versions earlier than 9.4.2