CVE-2016-0773
CVE-2016-0773
This page contains facts from public vulnerability sources. Check the original advisory before updating.
PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode character range in a regular expression.
CVSS 7.5 · High · EPSS 6.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
postgresql-9.1 Ubuntu:14.04:LTS
- Versions
- 9.1.10-1
- 9.1.10-1bzr1
- 9.1.11-1
- 9.1.11-2
- 9.1.12-1
- 9.1.13-1
- 9.1.14-0ubuntu0.14.04
- 9.1.15-0ubuntu0.14.04
- 9.1.16-0ubuntu0.14.04
- 9.1.17-0ubuntu0.14.04
- 9.1.18-0ubuntu0.14.04
- 9.1.19-0ubuntu0.14.04
- Affected ranges
- ECOSYSTEM: < 9.1.20-0ubuntu0.14.04
Update to 9.1.20-0ubuntu0.14.04
postgresql-9.3 Ubuntu:14.04:LTS
- Versions
- 9.3.1-1
- 9.3.2-1
- 9.3.2-1ubuntu1
- 9.3.2-1ubuntu2
- 9.3.3-1
- 9.3.3-1bzr1
- 9.3.3-1bzr2
- 9.3.4-1
- 9.3.5-0ubuntu0.14.04.1
- 9.3.6-0ubuntu0.14.04
- 9.3.7-0ubuntu0.14.04
- 9.3.8-0ubuntu0.4.04
- 9.3.9-0ubuntu0.14.04
- 9.3.10-0ubuntu0.14.04
- Affected ranges
- ECOSYSTEM: < 9.3.11-0ubuntu0.14.04
Update to 9.3.11-0ubuntu0.14.04
Original sources
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html
- https://puppet.com/security/cve/CVE-2016-0773
- http://www.postgresql.org/docs/current/static/release-9-3-11.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html
- http://www.postgresql.org/docs/current/static/release-9-2-15.html
- https://kc.mcafee.com/corporate/index?page=content&id=SB10152
- http://www.postgresql.org/docs/current/static/release-9-5-1.html
- https://security.gentoo.org/glsa/201701-33
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.postgresql.org/about/news/1644/
- http://www.securitytracker.com/id/1035005
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177878.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177820.html
- http://rhn.redhat.com/errata/RHSA-2016-1060.html
- http://www.securityfocus.com/bid/83184
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html
- http://www.postgresql.org/docs/current/static/release-9-4-6.html
- http://www.ubuntu.com/usn/USN-2894-1
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html
- http://www.postgresql.org/docs/current/static/release-9-1-20.html
- http://www.debian.org/security/2016/dsa-3476
- http://www.debian.org/security/2016/dsa-3475
- https://nvd.nist.gov/vuln/detail/CVE-2016-0773