PostgreSQL Multipe Memory Corruption and Security Bypass Vulnerabilities
BID:101781
Info
PostgreSQL Multipe Memory Corruption and Security Bypass Vulnerabilities
| Bugtraq ID: | 101781 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2017-15098 CVE-2017-15099 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 09 2017 12:00AM |
| Updated: | Dec 19 2017 09:00PM |
| Credit: | Moritz Muehlenhoff |
| Vulnerable: |
PostgreSQL PostgreSQL 9.6.4 PostgreSQL PostgreSQL 9.5.8 PostgreSQL PostgreSQL 9.5.7 PostgreSQL PostgreSQL 9.5.6 PostgreSQL PostgreSQL 9.5.4 PostgreSQL PostgreSQL 9.5.1 PostgreSQL PostgreSQL 9.5 PostgreSQL PostgreSQL 9.4.13 PostgreSQL PostgreSQL 9.4.12 PostgreSQL PostgreSQL 9.4.11 PostgreSQL PostgreSQL 9.4.9 PostgreSQL PostgreSQL 9.4.6 PostgreSQL PostgreSQL 9.4.5 PostgreSQL PostgreSQL 9.4.4 PostgreSQL PostgreSQL 9.4.3 PostgreSQL PostgreSQL 9.4.2 PostgreSQL PostgreSQL 9.4.1 PostgreSQL PostgreSQL 9.3.18 PostgreSQL PostgreSQL 9.3.17 PostgreSQL PostgreSQL 9.3.16 PostgreSQL PostgreSQL 9.3.14 PostgreSQL PostgreSQL 9.3.11 PostgreSQL PostgreSQL 9.3.10 PostgreSQL PostgreSQL 9.3.9 PostgreSQL PostgreSQL 9.3.8 PostgreSQL PostgreSQL 9.3.7 PostgreSQL PostgreSQL 9.3.6 PostgreSQL PostgreSQL 9.3.5 PostgreSQL PostgreSQL 9.3.4 PostgreSQL PostgreSQL 9.3.3 PostgreSQL PostgreSQL 9.3.2 PostgreSQL PostgreSQL 9.2.22 PostgreSQL PostgreSQL 9.2.21 PostgreSQL PostgreSQL 9.2.20 PostgreSQL PostgreSQL 9.2.18 PostgreSQL PostgreSQL 9.2.15 PostgreSQL PostgreSQL 9.2.14 PostgreSQL PostgreSQL 9.2.13 PostgreSQL PostgreSQL 9.2.12 PostgreSQL PostgreSQL 9.2.11 PostgreSQL PostgreSQL 9.2.10 PostgreSQL PostgreSQL 9.2.8 PostgreSQL PostgreSQL 9.2.7 PostgreSQL PostgreSQL 9.2.6 PostgreSQL PostgreSQL 9.2.5 PostgreSQL PostgreSQL 9.2.3 PostgreSQL PostgreSQL 9.1.23 PostgreSQL PostgreSQL 9.1.20 PostgreSQL PostgreSQL 9.1.19 PostgreSQL PostgreSQL 9.1.18 PostgreSQL PostgreSQL 9.1.17 PostgreSQL PostgreSQL 9.1.16 PostgreSQL PostgreSQL 9.1.15 PostgreSQL PostgreSQL 9.1.14 PostgreSQL PostgreSQL 9.1.13 PostgreSQL PostgreSQL 9.1.12 PostgreSQL PostgreSQL 9.1.11 PostgreSQL PostgreSQL 9.1.8 PostgreSQL PostgreSQL 9.1.3 PostgreSQL PostgreSQL 9.0.23 PostgreSQL PostgreSQL 9.0.22 PostgreSQL PostgreSQL 9.0.21 PostgreSQL PostgreSQL 9.0.20 PostgreSQL PostgreSQL 9.0.19 PostgreSQL PostgreSQL 9.0.18 PostgreSQL PostgreSQL 9.0.17 PostgreSQL PostgreSQL 9.0.16 PostgreSQL PostgreSQL 9.0.15 PostgreSQL PostgreSQL 9.0.14 PostgreSQL PostgreSQL 9.0.12 PostgreSQL PostgreSQL 9.0.7 PostgreSQL PostgreSQL 9.0.3 PostgreSQL PostgreSQL 9.0 PostgreSQL PostgreSQL 9.6.3 PostgreSQL PostgreSQL 9.6.2 PostgreSQL PostgreSQL 9.6.1 PostgreSQL PostgreSQL 9.5.2 PostgreSQL PostgreSQL 9.4.1-1 PostgreSQL PostgreSQL 9.4 PostgreSQL PostgreSQL 9.3.1 PostgreSQL PostgreSQL 9.3 PostgreSQL PostgreSQL 9.2.4-1 PostgreSQL PostgreSQL 9.2.4 PostgreSQL PostgreSQL 9.2.2-1 PostgreSQL PostgreSQL 9.2.2 PostgreSQL PostgreSQL 9.2.1 PostgreSQL PostgreSQL 9.2 PostgreSQL PostgreSQL 9.1.9-1 PostgreSQL PostgreSQL 9.1.9 PostgreSQL PostgreSQL 9.1.7 PostgreSQL PostgreSQL 9.1.6 PostgreSQL PostgreSQL 9.1.5 PostgreSQL PostgreSQL 9.1.4 PostgreSQL PostgreSQL 9.1.2 PostgreSQL PostgreSQL 9.1.15-0+deb7u1 PostgreSQL PostgreSQL 9.1.11-2 PostgreSQL PostgreSQL 9.1.10 PostgreSQL PostgreSQL 9.1.1 PostgreSQL PostgreSQL 9.1 PostgreSQL PostgreSQL 9.0.9 PostgreSQL PostgreSQL 9.0.8 PostgreSQL PostgreSQL 9.0.6 PostgreSQL PostgreSQL 9.0.5 PostgreSQL PostgreSQL 9.0.4 PostgreSQL PostgreSQL 9.0.2 PostgreSQL PostgreSQL 9.0.13-1 PostgreSQL PostgreSQL 9.0.13 PostgreSQL PostgreSQL 9.0.11 PostgreSQL PostgreSQL 9.0.10 PostgreSQL PostgreSQL 9.0.1 |
| Not Vulnerable: |
PostgreSQL PostgreSQL 9.6.6 |
Discussion
PostgreSQL Multipe Memory Corruption and Security Bypass Vulnerabilities
PostgreSQL is prone to a security-bypass vulnerability and multiple memory-corruption vulnerabilities.
Attackers can exploit these issues to bypass certain security restrictions, and perform unauthorized actions or obtain sensitive information. Failed exploit attempts will result in a denial-of-service condition.
PostgreSQL is prone to a security-bypass vulnerability and multiple memory-corruption vulnerabilities.
Attackers can exploit these issues to bypass certain security restrictions, and perform unauthorized actions or obtain sensitive information. Failed exploit attempts will result in a denial-of-service condition.