CVE-2016-0773
CVE-2016-0773
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode character range in a regular expression.
CVSS 7.5 · Hoch · EPSS 6,9% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
n/a
- Softwareversionen
- n/a: Betroffen
Keine Korrektur veröffentlicht
postgresql-9.1 Ubuntu:14.04:LTS
- Softwareversionen
- 9.1.10-1
- 9.1.10-1bzr1
- 9.1.11-1
- 9.1.11-2
- 9.1.12-1
- 9.1.13-1
- 9.1.14-0ubuntu0.14.04
- 9.1.15-0ubuntu0.14.04
- 9.1.16-0ubuntu0.14.04
- 9.1.17-0ubuntu0.14.04
- 9.1.18-0ubuntu0.14.04
- 9.1.19-0ubuntu0.14.04
- Betroffene Versionsbereiche
- ECOSYSTEM: < 9.1.20-0ubuntu0.14.04
Auf 9.1.20-0ubuntu0.14.04 aktualisieren
postgresql-9.3 Ubuntu:14.04:LTS
- Softwareversionen
- 9.3.1-1
- 9.3.2-1
- 9.3.2-1ubuntu1
- 9.3.2-1ubuntu2
- 9.3.3-1
- 9.3.3-1bzr1
- 9.3.3-1bzr2
- 9.3.4-1
- 9.3.5-0ubuntu0.14.04.1
- 9.3.6-0ubuntu0.14.04
- 9.3.7-0ubuntu0.14.04
- 9.3.8-0ubuntu0.4.04
- 9.3.9-0ubuntu0.14.04
- 9.3.10-0ubuntu0.14.04
- Betroffene Versionsbereiche
- ECOSYSTEM: < 9.3.11-0ubuntu0.14.04
Auf 9.3.11-0ubuntu0.14.04 aktualisieren
Originalquellen
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html
- https://puppet.com/security/cve/CVE-2016-0773
- http://www.postgresql.org/docs/current/static/release-9-3-11.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html
- http://www.postgresql.org/docs/current/static/release-9-2-15.html
- https://kc.mcafee.com/corporate/index?page=content&id=SB10152
- http://www.postgresql.org/docs/current/static/release-9-5-1.html
- https://security.gentoo.org/glsa/201701-33
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.postgresql.org/about/news/1644/
- http://www.securitytracker.com/id/1035005
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177878.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177820.html
- http://rhn.redhat.com/errata/RHSA-2016-1060.html
- http://www.securityfocus.com/bid/83184
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html
- http://www.postgresql.org/docs/current/static/release-9-4-6.html
- http://www.ubuntu.com/usn/USN-2894-1
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html
- http://www.postgresql.org/docs/current/static/release-9-1-20.html
- http://www.debian.org/security/2016/dsa-3476
- http://www.debian.org/security/2016/dsa-3475
- https://nvd.nist.gov/vuln/detail/CVE-2016-0773