CVE-2017-15098

2017-11-2217:29:00

Google

osv.dev

6.6 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.2%

JSON

Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory.

CPENameOperatorVersion
postgresqleq9.2.1-r0
postgresql14eq9.6.5-r1
postgresqleq8.4.3-r1
postgresql14eq9.0.4-r0
postgresqleq9.4.6-r1
postgresqleq9.5.7-r1
postgresql14eq9.1.1-r2
postgresqleq9.5.2-r2
postgresql14eq9.0.3-r0
postgresqleq9.3.2-r0

Name	Operator	Version
postgresql	eq	9.2.1-r0
postgresql14	eq	9.6.5-r1
postgresql	eq	8.4.3-r1
postgresql14	eq	9.0.4-r0
postgresql	eq	9.4.6-r1
postgresql	eq	9.5.7-r1
postgresql14	eq	9.1.1-r2
postgresql	eq	9.5.2-r2
postgresql14	eq	9.0.3-r0
postgresql	eq	9.3.2-r0