CVE-2016-0773
CVE-2016-0773
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode character range in a regular expression.
CVSS 7.5 · Alta · EPSS 6,9% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
postgresql-9.1 Ubuntu:14.04:LTS
- Versiones
- 9.1.10-1
- 9.1.10-1bzr1
- 9.1.11-1
- 9.1.11-2
- 9.1.12-1
- 9.1.13-1
- 9.1.14-0ubuntu0.14.04
- 9.1.15-0ubuntu0.14.04
- 9.1.16-0ubuntu0.14.04
- 9.1.17-0ubuntu0.14.04
- 9.1.18-0ubuntu0.14.04
- 9.1.19-0ubuntu0.14.04
- Intervalos de versiones afectados
- ECOSYSTEM: < 9.1.20-0ubuntu0.14.04
Actualiza a 9.1.20-0ubuntu0.14.04
postgresql-9.3 Ubuntu:14.04:LTS
- Versiones
- 9.3.1-1
- 9.3.2-1
- 9.3.2-1ubuntu1
- 9.3.2-1ubuntu2
- 9.3.3-1
- 9.3.3-1bzr1
- 9.3.3-1bzr2
- 9.3.4-1
- 9.3.5-0ubuntu0.14.04.1
- 9.3.6-0ubuntu0.14.04
- 9.3.7-0ubuntu0.14.04
- 9.3.8-0ubuntu0.4.04
- 9.3.9-0ubuntu0.14.04
- 9.3.10-0ubuntu0.14.04
- Intervalos de versiones afectados
- ECOSYSTEM: < 9.3.11-0ubuntu0.14.04
Actualiza a 9.3.11-0ubuntu0.14.04
Fuentes originales
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html
- https://puppet.com/security/cve/CVE-2016-0773
- http://www.postgresql.org/docs/current/static/release-9-3-11.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html
- http://www.postgresql.org/docs/current/static/release-9-2-15.html
- https://kc.mcafee.com/corporate/index?page=content&id=SB10152
- http://www.postgresql.org/docs/current/static/release-9-5-1.html
- https://security.gentoo.org/glsa/201701-33
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.postgresql.org/about/news/1644/
- http://www.securitytracker.com/id/1035005
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177878.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177820.html
- http://rhn.redhat.com/errata/RHSA-2016-1060.html
- http://www.securityfocus.com/bid/83184
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html
- http://www.postgresql.org/docs/current/static/release-9-4-6.html
- http://www.ubuntu.com/usn/USN-2894-1
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html
- http://www.postgresql.org/docs/current/static/release-9-1-20.html
- http://www.debian.org/security/2016/dsa-3476
- http://www.debian.org/security/2016/dsa-3475
- https://nvd.nist.gov/vuln/detail/CVE-2016-0773