4.3

CVE-2015-3165

EPSS 8.53%
Published 28.05.2015 14:59:06
Last modified 12.04.2025 10:46:40
Source secalert@redhat.com
Teams watchlist Login
Open Login

Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL session at a time when the authentication timeout will expire during the session shutdown sequence.

Affected products Warnungen 0 Metrics 2 CWE 0 References 19

Data is provided by the National Vulnerability Database (NVD)

Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version14.10

Canonical ≫ Ubuntu Linux Version15.04

Debian ≫ Debian Linux Version7.0

Debian ≫ Debian Linux Version8.0

Apple ≫ macOS X Server Version5.0.2

Postgresql ≫ Postgresql Version <= 9.0.19

Postgresql ≫ Postgresql Version9.1

Postgresql ≫ Postgresql Version9.1.1

Postgresql ≫ Postgresql Version9.1.2

Postgresql ≫ Postgresql Version9.1.3

Postgresql ≫ Postgresql Version9.1.4

Postgresql ≫ Postgresql Version9.1.5

Postgresql ≫ Postgresql Version9.1.6

Postgresql ≫ Postgresql Version9.1.7

Postgresql ≫ Postgresql Version9.1.8

Postgresql ≫ Postgresql Version9.1.9

Postgresql ≫ Postgresql Version9.1.10

Postgresql ≫ Postgresql Version9.1.11

Postgresql ≫ Postgresql Version9.1.12

Postgresql ≫ Postgresql Version9.1.13

Postgresql ≫ Postgresql Version9.1.14

Postgresql ≫ Postgresql Version9.1.15

Postgresql ≫ Postgresql Version9.2

Postgresql ≫ Postgresql Version9.2.1

Postgresql ≫ Postgresql Version9.2.2

Postgresql ≫ Postgresql Version9.2.3

Postgresql ≫ Postgresql Version9.2.4

Postgresql ≫ Postgresql Version9.2.5

Postgresql ≫ Postgresql Version9.2.6

Postgresql ≫ Postgresql Version9.2.7

Postgresql ≫ Postgresql Version9.2.8

Postgresql ≫ Postgresql Version9.2.9

Postgresql ≫ Postgresql Version9.2.10

Postgresql ≫ Postgresql Version9.3

Postgresql ≫ Postgresql Version9.3.1

Postgresql ≫ Postgresql Version9.3.2

Postgresql ≫ Postgresql Version9.3.3

Postgresql ≫ Postgresql Version9.3.4

Postgresql ≫ Postgresql Version9.3.5

Postgresql ≫ Postgresql Version9.3.6

Postgresql ≫ Postgresql Version9.4.0

Postgresql ≫ Postgresql Version9.4.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	8.53%	0.921

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html

Third Party Advisory

Mailing List

https://support.apple.com/HT205219

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1194.html

http://rhn.redhat.com/errata/RHSA-2015-1195.html

http://rhn.redhat.com/errata/RHSA-2015-1196.html

http://www.debian.org/security/2015/dsa-3269

Third Party Advisory

http://www.debian.org/security/2015/dsa-3270

Third Party Advisory

http://www.postgresql.org/about/news/1587/

Vendor Advisory

http://www.postgresql.org/docs/9.0/static/release-9-0-20.html

Release Notes

http://www.postgresql.org/docs/9.1/static/release-9-1-16.html

Release Notes

http://www.postgresql.org/docs/9.2/static/release-9-2-11.html

Release Notes

http://www.postgresql.org/docs/9.3/static/release-9-3-7.html

Release Notes

http://www.postgresql.org/docs/9.4/static/release-9-4-2.html

Release Notes

http://www.securityfocus.com/bid/74787

Third Party Advisory

VDB Entry

http://www.ubuntu.com/usn/USN-2621-1

Vendor Advisory

https://security.gentoo.org/glsa/201507-20

https://nvd.nist.gov/vuln/detail/CVE-2015-3165

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-3165

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-3165

EUVD