CVE-2016-3065 The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequentl...
CriticalCVSS 9.1
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server memory information or cause a denial of service (server crash) via a crafted bytea value in a BRIN index page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| postgresql | = 9.5 | No fix listed |
| postgresql | = 9.5.1 | No fix listed |
References
- git.postgresql.org
- www.postgresql.org patch vendor-advisory
- www.postgresql.org
- 1035468 vdb-entry