ALAS-2015-609 --- postgresql92 postgresql93 postgresql94ID: oval:org.secpod.oval:def:1200180 | Date: (C)2016-01-04 (M)2023-12-07 |
Class: PATCH | Family: unix |
Multiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10 and 9.4.x before 9.4.5 allow attackers to cause a denial of service via unspecified vectors, which are not properly handled in json or jsonb values. The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause a denial of service or read arbitrary server memory via a "too-short" salt
Platform: |
Amazon Linux AMI |
Product: |
postgresql92 |
postgresql93 |
postgresql94 |