4.3 - DSA-3269

Executive Summary

Summary
Title	postgresql-9.1 regression update

Informations
Name	DSA-3269	First vendor Publication	2015-05-22
Vendor	Debian	Last vendor Modification	2015-05-31
Severity (Vendor)	N/A	Revision	2

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:N/A:P)
Cvss Base Score	4.3	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The update for postgresql-9.1 in DSA-3269-1 introduced a regression which can causes PostgreSQL to refuse to restart after an unexpected shutdown or when restoring from a binary backup. Updated packages are now available to address this regression. Please refer to the upstream Bug FAQ for additional information:

https://wiki.postgresql.org/wiki/May_2015_Fsync_Permissions_Bug

For reference, the original advisory text follows.

Several vulnerabilities have been found in PostgreSQL-9.1, a SQL database system.

CVE-2015-3165 (Remote crash)

SSL clients disconnecting just before the authentication timeout expires can cause the server to crash.

CVE-2015-3166 (Information exposure)

The replacement implementation of snprintf() failed to check for errors reported by the underlying system library calls; the main case that might be missed is out-of-memory situations. In the worst case this might lead to information exposure

CVE-2015-3167 (Possible side-channel key exposure)

In contrib/pgcrypto, some cases of decryption with an incorrect key could report other error message texts. Fix by using a one-size-fits-all message.

For the oldstable distribution (wheezy), this problem has been fixed in version 9.1.16-0+deb7u2.

We recommend that you upgrade your postgresql-9.1 packages.

Original Source

Url : http://www.debian.org/security/2015/dsa-3269

CWE : Common Weakness Enumeration

%	Id	Name
50 %	CWE-200	Information Exposure
50 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

Type	Description	Count
Application	Postgresql cpe:2.3:a:postgresql:postgresql:9.4.1:::::::* cpe:2.3:a:postgresql:postgresql:9.4.0:::::::* cpe:2.3:a:postgresql:postgresql:9.4-0.5.3.1:::::::* cpe:2.3:a:postgresql:postgresql:9.4:::::::* cpe:2.3:a:postgresql:postgresql:9.3.9:::::::* cpe:2.3:a:postgresql:postgresql:9.3.8:::::::* cpe:2.3:a:postgresql:postgresql:9.3.7:::::::* cpe:2.3:a:postgresql:postgresql:9.3.6:::::::* cpe:2.3:a:postgresql:postgresql:9.3.5:::::::* cpe:2.3:a:postgresql:postgresql:9.3.4:::::::* cpe:2.3:a:postgresql:postgresql:9.3.3:::::::* cpe:2.3:a:postgresql:postgresql:9.3.25:::::::* cpe:2.3:a:postgresql:postgresql:9.3.24:::::::* cpe:2.3:a:postgresql:postgresql:9.3.23:::::::* cpe:2.3:a:postgresql:postgresql:9.3.22:::::::* cpe:2.3:a:postgresql:postgresql:9.3.21:::::::* cpe:2.3:a:postgresql:postgresql:9.3.20:::::::* cpe:2.3:a:postgresql:postgresql:9.3.2:::::::* cpe:2.3:a:postgresql:postgresql:9.3.19:::::::* cpe:2.3:a:postgresql:postgresql:9.3.18:::::::* cpe:2.3:a:postgresql:postgresql:9.3.17:::::::* cpe:2.3:a:postgresql:postgresql:9.3.16:::::::* cpe:2.3:a:postgresql:postgresql:9.3.15:::::::* cpe:2.3:a:postgresql:postgresql:9.3.14:::::::* cpe:2.3:a:postgresql:postgresql:9.3.13:::::::* cpe:2.3:a:postgresql:postgresql:9.3.12:::::::* cpe:2.3:a:postgresql:postgresql:9.3.11:::::::* cpe:2.3:a:postgresql:postgresql:9.3.10:::::::* cpe:2.3:a:postgresql:postgresql:9.3.1:::::::* cpe:2.3:a:postgresql:postgresql:9.3.0:::::::* cpe:2.3:a:postgresql:postgresql:9.3:::::::* cpe:2.3:a:postgresql:postgresql:9.2.9:::::::* cpe:2.3:a:postgresql:postgresql:9.2.8:::::::* cpe:2.3:a:postgresql:postgresql:9.2.7:::::::* cpe:2.3:a:postgresql:postgresql:9.2.6:::::::* cpe:2.3:a:postgresql:postgresql:9.2.5:::::::* cpe:2.3:a:postgresql:postgresql:9.2.4:::::::* cpe:2.3:a:postgresql:postgresql:9.2.3:::::::* cpe:2.3:a:postgresql:postgresql:9.2.24:::::::* cpe:2.3:a:postgresql:postgresql:9.2.23:::::::* cpe:2.3:a:postgresql:postgresql:9.2.22:::::::* cpe:2.3:a:postgresql:postgresql:9.2.21:::::::* cpe:2.3:a:postgresql:postgresql:9.2.20:::::::* cpe:2.3:a:postgresql:postgresql:9.2.2:::::::* cpe:2.3:a:postgresql:postgresql:9.2.19:::::::* cpe:2.3:a:postgresql:postgresql:9.2.18:::::::* cpe:2.3:a:postgresql:postgresql:9.2.17:::::::* cpe:2.3:a:postgresql:postgresql:9.2.16:::::::* cpe:2.3:a:postgresql:postgresql:9.2.15:::::::* cpe:2.3:a:postgresql:postgresql:9.2.14:::::::* cpe:2.3:a:postgresql:postgresql:9.2.13:::::::* cpe:2.3:a:postgresql:postgresql:9.2.12:::::::* cpe:2.3:a:postgresql:postgresql:9.2.11:::::::* cpe:2.3:a:postgresql:postgresql:9.2.10:::::::* cpe:2.3:a:postgresql:postgresql:9.2.1:::::::* cpe:2.3:a:postgresql:postgresql:9.2.0:::::::* cpe:2.3:a:postgresql:postgresql:9.2:::::::* cpe:2.3:a:postgresql:postgresql:9.1.9:::::::* cpe:2.3:a:postgresql:postgresql:9.1.8:::::::* cpe:2.3:a:postgresql:postgresql:9.1.7:::::::* cpe:2.3:a:postgresql:postgresql:9.1.6:::::::* cpe:2.3:a:postgresql:postgresql:9.1.5:::::::* cpe:2.3:a:postgresql:postgresql:9.1.4:::::::* cpe:2.3:a:postgresql:postgresql:9.1.3:::::::* cpe:2.3:a:postgresql:postgresql:9.1.24:::::::* cpe:2.3:a:postgresql:postgresql:9.1.23:::::::* cpe:2.3:a:postgresql:postgresql:9.1.22:::::::* cpe:2.3:a:postgresql:postgresql:9.1.21:::::::* cpe:2.3:a:postgresql:postgresql:9.1.20:::::::* cpe:2.3:a:postgresql:postgresql:9.1.2:::::::* cpe:2.3:a:postgresql:postgresql:9.1.19:::::::* cpe:2.3:a:postgresql:postgresql:9.1.18:::::::* cpe:2.3:a:postgresql:postgresql:9.1.17:::::::* cpe:2.3:a:postgresql:postgresql:9.1.16:::::::* cpe:2.3:a:postgresql:postgresql:9.1.15:::::::* cpe:2.3:a:postgresql:postgresql:9.1.14:::::::* cpe:2.3:a:postgresql:postgresql:9.1.13:::::::* cpe:2.3:a:postgresql:postgresql:9.1.12:::::::* cpe:2.3:a:postgresql:postgresql:9.1.11:::::::* cpe:2.3:a:postgresql:postgresql:9.1.10:::::::* cpe:2.3:a:postgresql:postgresql:9.1.1:::::::* cpe:2.3:a:postgresql:postgresql:9.1.0:::::::* cpe:2.3:a:postgresql:postgresql:9.1:::::::* cpe:2.3:a:postgresql:postgresql:9.0.9:::::::* cpe:2.3:a:postgresql:postgresql:9.0.8:::::::* cpe:2.3:a:postgresql:postgresql:9.0.7:::::::* cpe:2.3:a:postgresql:postgresql:9.0.6:::::::* cpe:2.3:a:postgresql:postgresql:9.0.5:::::::* cpe:2.3:a:postgresql:postgresql:9.0.4:::::::* cpe:2.3:a:postgresql:postgresql:9.0.3:::::::* cpe:2.3:a:postgresql:postgresql:9.0.23:::::::* cpe:2.3:a:postgresql:postgresql:9.0.22:::::::* cpe:2.3:a:postgresql:postgresql:9.0.21:::::::* cpe:2.3:a:postgresql:postgresql:9.0.20:::::::* cpe:2.3:a:postgresql:postgresql:9.0.2:::::::* cpe:2.3:a:postgresql:postgresql:9.0.19:::::::* cpe:2.3:a:postgresql:postgresql:9.0.18:::::::* cpe:2.3:a:postgresql:postgresql:9.0.17:::::::* cpe:2.3:a:postgresql:postgresql:9.0.16:::::::* cpe:2.3:a:postgresql:postgresql:9.0.15:::::::* cpe:2.3:a:postgresql:postgresql:9.0.14:::::::* cpe:2.3:a:postgresql:postgresql:9.0.13:::::::* cpe:2.3:a:postgresql:postgresql:9.0.12:::::::* cpe:2.3:a:postgresql:postgresql:9.0.11:::::::* cpe:2.3:a:postgresql:postgresql:9.0.10:::::::* cpe:2.3:a:postgresql:postgresql:9.0.1:::::::* cpe:2.3:a:postgresql:postgresql:9.0.0:beta1:::::: cpe:2.3:a:postgresql:postgresql:9.0.0:::::::* cpe:2.3:a:postgresql:postgresql:9.0:::::::* cpe:2.3:a:postgresql:postgresql:8.5:::::::* cpe:2.3:a:postgresql:postgresql:8.5:alpha2:::::: cpe:2.3:a:postgresql:postgresql:8.5:alpha1:::::: cpe:2.3:a:postgresql:postgresql:8.4.9:::::::* cpe:2.3:a:postgresql:postgresql:8.4.8:::::::* cpe:2.3:a:postgresql:postgresql:8.4.7:::::::* cpe:2.3:a:postgresql:postgresql:8.4.6:::::::* cpe:2.3:a:postgresql:postgresql:8.4.5:::::::* cpe:2.3:a:postgresql:postgresql:8.4.4:::::::* cpe:2.3:a:postgresql:postgresql:8.4.3:::::::* cpe:2.3:a:postgresql:postgresql:8.4.22:::::::* cpe:2.3:a:postgresql:postgresql:8.4.21:::::::* cpe:2.3:a:postgresql:postgresql:8.4.20:::::::* cpe:2.3:a:postgresql:postgresql:8.4.2:::::::* cpe:2.3:a:postgresql:postgresql:8.4.19:::::::* cpe:2.3:a:postgresql:postgresql:8.4.18:::::::* cpe:2.3:a:postgresql:postgresql:8.4.17:::::::* cpe:2.3:a:postgresql:postgresql:8.4.16:::::::* cpe:2.3:a:postgresql:postgresql:8.4.15:::::::* cpe:2.3:a:postgresql:postgresql:8.4.14:::::::* cpe:2.3:a:postgresql:postgresql:8.4.13:::::::* cpe:2.3:a:postgresql:postgresql:8.4.12:::::::* cpe:2.3:a:postgresql:postgresql:8.4.11:::::::* cpe:2.3:a:postgresql:postgresql:8.4.10:::::::* cpe:2.3:a:postgresql:postgresql:8.4.1:::::::* cpe:2.3:a:postgresql:postgresql:8.4.0:::::::* cpe:2.3:a:postgresql:postgresql:8.4:::::::* cpe:2.3:a:postgresql:postgresql:8.3.9:::::::* cpe:2.3:a:postgresql:postgresql:8.3.8:::::::* cpe:2.3:a:postgresql:postgresql:8.3.7:::::::* cpe:2.3:a:postgresql:postgresql:8.3.6:::::::* cpe:2.3:a:postgresql:postgresql:8.3.5:::::::* cpe:2.3:a:postgresql:postgresql:8.3.4:::::::* cpe:2.3:a:postgresql:postgresql:8.3.3:::::::* cpe:2.3:a:postgresql:postgresql:8.3.23:::::::* cpe:2.3:a:postgresql:postgresql:8.3.22:::::::* cpe:2.3:a:postgresql:postgresql:8.3.21:::::::* cpe:2.3:a:postgresql:postgresql:8.3.20:::::::* cpe:2.3:a:postgresql:postgresql:8.3.2:::::::* cpe:2.3:a:postgresql:postgresql:8.3.19:::::::* cpe:2.3:a:postgresql:postgresql:8.3.18:::::::* cpe:2.3:a:postgresql:postgresql:8.3.17:::::::* cpe:2.3:a:postgresql:postgresql:8.3.16:::::::* cpe:2.3:a:postgresql:postgresql:8.3.15:::::::* cpe:2.3:a:postgresql:postgresql:8.3.14:::::::* cpe:2.3:a:postgresql:postgresql:8.3.13:::::::* cpe:2.3:a:postgresql:postgresql:8.3.12:::::::* cpe:2.3:a:postgresql:postgresql:8.3.11:::::::* cpe:2.3:a:postgresql:postgresql:8.3.10:::::::* cpe:2.3:a:postgresql:postgresql:8.3.1:::::::* cpe:2.3:a:postgresql:postgresql:8.3.0:::::::* cpe:2.3:a:postgresql:postgresql:8.3:::::::* cpe:2.3:a:postgresql:postgresql:8.2.9:::::::* cpe:2.3:a:postgresql:postgresql:8.2.8:::::::* cpe:2.3:a:postgresql:postgresql:8.2.7:::::::* cpe:2.3:a:postgresql:postgresql:8.2.6:::::::* cpe:2.3:a:postgresql:postgresql:8.2.5:::::::* cpe:2.3:a:postgresql:postgresql:8.2.4:::::::* cpe:2.3:a:postgresql:postgresql:8.2.3:::::::* cpe:2.3:a:postgresql:postgresql:8.2.23:::::::* cpe:2.3:a:postgresql:postgresql:8.2.22:::::::* cpe:2.3:a:postgresql:postgresql:8.2.21:::::::* cpe:2.3:a:postgresql:postgresql:8.2.20:::::::* cpe:2.3:a:postgresql:postgresql:8.2.2:::::::* cpe:2.3:a:postgresql:postgresql:8.2.19:::::::* cpe:2.3:a:postgresql:postgresql:8.2.18:::::::* cpe:2.3:a:postgresql:postgresql:8.2.17:::::::* cpe:2.3:a:postgresql:postgresql:8.2.16:::::::* cpe:2.3:a:postgresql:postgresql:8.2.15:::::::* cpe:2.3:a:postgresql:postgresql:8.2.14:::::::* cpe:2.3:a:postgresql:postgresql:8.2.13:::::::* cpe:2.3:a:postgresql:postgresql:8.2.12:::::::* cpe:2.3:a:postgresql:postgresql:8.2.11:::::::* cpe:2.3:a:postgresql:postgresql:8.2.10:::::::* cpe:2.3:a:postgresql:postgresql:8.2.1:::::::* cpe:2.3:a:postgresql:postgresql:8.2.0:::::::* cpe:2.3:a:postgresql:postgresql:8.2:::::::* cpe:2.3:a:postgresql:postgresql:8.1.9:::::::* cpe:2.3:a:postgresql:postgresql:8.1.8:::::::* cpe:2.3:a:postgresql:postgresql:8.1.7:::::::* cpe:2.3:a:postgresql:postgresql:8.1.6:::::::* cpe:2.3:a:postgresql:postgresql:8.1.5:::::::* cpe:2.3:a:postgresql:postgresql:8.1.4:::::::* cpe:2.3:a:postgresql:postgresql:8.1.3:::::::* cpe:2.3:a:postgresql:postgresql:8.1.23:::::::* cpe:2.3:a:postgresql:postgresql:8.1.22:::::::* cpe:2.3:a:postgresql:postgresql:8.1.21:::::::* cpe:2.3:a:postgresql:postgresql:8.1.20:::::::* cpe:2.3:a:postgresql:postgresql:8.1.2:::::::* cpe:2.3:a:postgresql:postgresql:8.1.19:::::::* cpe:2.3:a:postgresql:postgresql:8.1.18:::::::* cpe:2.3:a:postgresql:postgresql:8.1.17:::::::* cpe:2.3:a:postgresql:postgresql:8.1.16:::::::* cpe:2.3:a:postgresql:postgresql:8.1.15:::::::* cpe:2.3:a:postgresql:postgresql:8.1.14:::::::* cpe:2.3:a:postgresql:postgresql:8.1.13:::::::* cpe:2.3:a:postgresql:postgresql:8.1.12:::::::* cpe:2.3:a:postgresql:postgresql:8.1.11:::::::* cpe:2.3:a:postgresql:postgresql:8.1.10:::::::* cpe:2.3:a:postgresql:postgresql:8.1.1:::::::* cpe:2.3:a:postgresql:postgresql:8.1.0:::::::* cpe:2.3:a:postgresql:postgresql:8.1:::::::* cpe:2.3:a:postgresql:postgresql:8.0.9:::::::* cpe:2.3:a:postgresql:postgresql:8.0.8:::::::* cpe:2.3:a:postgresql:postgresql:8.0.7:::::::* cpe:2.3:a:postgresql:postgresql:8.0.6:::::::* cpe:2.3:a:postgresql:postgresql:8.0.5:::::::* cpe:2.3:a:postgresql:postgresql:8.0.4:::::::* cpe:2.3:a:postgresql:postgresql:8.0.317:::::::* cpe:2.3:a:postgresql:postgresql:8.0.3:::::::* cpe:2.3:a:postgresql:postgresql:8.0.26:::::::* cpe:2.3:a:postgresql:postgresql:8.0.25:::::::* cpe:2.3:a:postgresql:postgresql:8.0.24:::::::* cpe:2.3:a:postgresql:postgresql:8.0.23:::::::* cpe:2.3:a:postgresql:postgresql:8.0.22:::::::* cpe:2.3:a:postgresql:postgresql:8.0.21:::::::* cpe:2.3:a:postgresql:postgresql:8.0.20:::::::* cpe:2.3:a:postgresql:postgresql:8.0.2:::::::* cpe:2.3:a:postgresql:postgresql:8.0.19:::::::* cpe:2.3:a:postgresql:postgresql:8.0.18:::::::* cpe:2.3:a:postgresql:postgresql:8.0.17:::::::* cpe:2.3:a:postgresql:postgresql:8.0.16:::::::* cpe:2.3:a:postgresql:postgresql:8.0.15:::::::* cpe:2.3:a:postgresql:postgresql:8.0.14:::::::* cpe:2.3:a:postgresql:postgresql:8.0.13:::::::* cpe:2.3:a:postgresql:postgresql:8.0.12:::::::* cpe:2.3:a:postgresql:postgresql:8.0.11:::::::* cpe:2.3:a:postgresql:postgresql:8.0.10:::::::* cpe:2.3:a:postgresql:postgresql:8.0.1:::::::* cpe:2.3:a:postgresql:postgresql:8.0.0:::::::* cpe:2.3:a:postgresql:postgresql:8.0:::::::* cpe:2.3:a:postgresql:postgresql:7.4.9:::::::* cpe:2.3:a:postgresql:postgresql:7.4.8:::::::* cpe:2.3:a:postgresql:postgresql:7.4.7:::::::* cpe:2.3:a:postgresql:postgresql:7.4.6:::::::* cpe:2.3:a:postgresql:postgresql:7.4.5:::::::* cpe:2.3:a:postgresql:postgresql:7.4.4:::::::* cpe:2.3:a:postgresql:postgresql:7.4.30:::::::* cpe:2.3:a:postgresql:postgresql:7.4.3:::::::* cpe:2.3:a:postgresql:postgresql:7.4.29:::::::* cpe:2.3:a:postgresql:postgresql:7.4.28:::::::* cpe:2.3:a:postgresql:postgresql:7.4.27:::::::* cpe:2.3:a:postgresql:postgresql:7.4.26:::::::* cpe:2.3:a:postgresql:postgresql:7.4.25:::::::* cpe:2.3:a:postgresql:postgresql:7.4.24:::::::* cpe:2.3:a:postgresql:postgresql:7.4.23:::::::* cpe:2.3:a:postgresql:postgresql:7.4.22:::::::* cpe:2.3:a:postgresql:postgresql:7.4.21:::::::* cpe:2.3:a:postgresql:postgresql:7.4.20:::::::* cpe:2.3:a:postgresql:postgresql:7.4.2:::::::* cpe:2.3:a:postgresql:postgresql:7.4.19:::::::* cpe:2.3:a:postgresql:postgresql:7.4.18:::::::* cpe:2.3:a:postgresql:postgresql:7.4.17:::::::* cpe:2.3:a:postgresql:postgresql:7.4.16:::::::* cpe:2.3:a:postgresql:postgresql:7.4.15:::::::* cpe:2.3:a:postgresql:postgresql:7.4.14:::::::* cpe:2.3:a:postgresql:postgresql:7.4.13:::::::* cpe:2.3:a:postgresql:postgresql:7.4.12:::::::* cpe:2.3:a:postgresql:postgresql:7.4.11:::::::* cpe:2.3:a:postgresql:postgresql:7.4.10:::::::* cpe:2.3:a:postgresql:postgresql:7.4.1:::::::* cpe:2.3:a:postgresql:postgresql:7.4:::::::* cpe:2.3:a:postgresql:postgresql:7.3.9:::::::* cpe:2.3:a:postgresql:postgresql:7.3.8:::::::* cpe:2.3:a:postgresql:postgresql:7.3.7:::::::* cpe:2.3:a:postgresql:postgresql:7.3.6:::::::* cpe:2.3:a:postgresql:postgresql:7.3.5:::::::* cpe:2.3:a:postgresql:postgresql:7.3.4:::::::* cpe:2.3:a:postgresql:postgresql:7.3.3:::::::* cpe:2.3:a:postgresql:postgresql:7.3.21:::::::* cpe:2.3:a:postgresql:postgresql:7.3.20:::::::* cpe:2.3:a:postgresql:postgresql:7.3.2:::::::* cpe:2.3:a:postgresql:postgresql:7.3.19:::::::* cpe:2.3:a:postgresql:postgresql:7.3.18:::::::* cpe:2.3:a:postgresql:postgresql:7.3.17:::::::* cpe:2.3:a:postgresql:postgresql:7.3.16:::::::* cpe:2.3:a:postgresql:postgresql:7.3.15:::::::* cpe:2.3:a:postgresql:postgresql:7.3.14:::::::* cpe:2.3:a:postgresql:postgresql:7.3.13:::::::* cpe:2.3:a:postgresql:postgresql:7.3.12:::::::* cpe:2.3:a:postgresql:postgresql:7.3.11:::::::* cpe:2.3:a:postgresql:postgresql:7.3.10:::::::* cpe:2.3:a:postgresql:postgresql:7.3.1:::::::* cpe:2.3:a:postgresql:postgresql:7.3.0:::::::* cpe:2.3:a:postgresql:postgresql:7.3:::::::* cpe:2.3:a:postgresql:postgresql:7.2.8:::::::* cpe:2.3:a:postgresql:postgresql:7.2.7:::::::* cpe:2.3:a:postgresql:postgresql:7.2.6:::::::* cpe:2.3:a:postgresql:postgresql:7.2.5:::::::* cpe:2.3:a:postgresql:postgresql:7.2.4:::::::* cpe:2.3:a:postgresql:postgresql:7.2.3:::::::* cpe:2.3:a:postgresql:postgresql:7.2.2:::::::* cpe:2.3:a:postgresql:postgresql:7.2.1:::::::* cpe:2.3:a:postgresql:postgresql:7.2:::::::* cpe:2.3:a:postgresql:postgresql:7.1.3:::::::* cpe:2.3:a:postgresql:postgresql:7.1.2:::::::* cpe:2.3:a:postgresql:postgresql:7.1.1:::::::* cpe:2.3:a:postgresql:postgresql:7.1:::::::* cpe:2.3:a:postgresql:postgresql:7.0.3:::::::* cpe:2.3:a:postgresql:postgresql:7.0.2:::::::* cpe:2.3:a:postgresql:postgresql:7.0.1:::::::* cpe:2.3:a:postgresql:postgresql:7.0:::::::* cpe:2.3:a:postgresql:postgresql:6.5.3.1:::::::* cpe:2.3:a:postgresql:postgresql:6.5.3:::::::* cpe:2.3:a:postgresql:postgresql:6.5.2:::::::* cpe:2.3:a:postgresql:postgresql:6.5.1:::::::* cpe:2.3:a:postgresql:postgresql:6.5.0:::::::* cpe:2.3:a:postgresql:postgresql:6.5:::::::* cpe:2.3:a:postgresql:postgresql:6.4.2:::::::* cpe:2.3:a:postgresql:postgresql:6.4.1:::::::* cpe:2.3:a:postgresql:postgresql:6.4:::::::* cpe:2.3:a:postgresql:postgresql:6.3.2:::::::* cpe:2.3:a:postgresql:postgresql:6.3.1:::::::* cpe:2.3:a:postgresql:postgresql:6.3:::::::* cpe:2.3:a:postgresql:postgresql:6.2.1:::::::* cpe:2.3:a:postgresql:postgresql:6.2:::::::* cpe:2.3:a:postgresql:postgresql:6.1.1:::::::* cpe:2.3:a:postgresql:postgresql:6.1:::::::* cpe:2.3:a:postgresql:postgresql:6.0:::::::* cpe:2.3:a:postgresql:postgresql:1.09:::::::* cpe:2.3:a:postgresql:postgresql:1.08:::::::* cpe:2.3:a:postgresql:postgresql:1.02:::::::* cpe:2.3:a:postgresql:postgresql:1.01:::::::* cpe:2.3:a:postgresql:postgresql:1.0:::::::* cpe:2.3:a:postgresql:postgresql:::::::: cpe:2.3:a:postgresql:postgresql:-:::::debian:: cpe:2.3:a:postgresql:postgresql:-:::::ubuntu:: cpe:2.3:a:postgresql:postgresql:-:::::::*	337
Os	Apple Mac Os X Server cpe:2.3:o:apple:mac_os_x_server:5.0.2:::::::*	1
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:15.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:14.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts:::	4
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:9.0:::::::* cpe:2.3:o:debian:debian_linux:8.0:::::::* cpe:2.3:o:debian:debian_linux:7.0:::::::*	3

Information Assurance Vulnerability Management (IAVM)

Date	Description
2015-05-28	IAVM : 2015-B-0068 - Multiple Vulnerabilities in PostgreSQL Severity : Category I - VMSKEY : V0060809

Nessus® Vulnerability Scanner

Date	Description
2015-09-22	Name : The remote host is missing a security update for OS X Server. File : macosx_server_5_0_3.nasl - Type : ACT_GATHER_INFO
2015-07-23	Name : A web application on the remote host is affected by multiple vulnerabilities. File : puppet_enterprise_activemq_psql_ssl.nasl - Type : ACT_GATHER_INFO
2015-07-21	Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2015-1264-1.nasl - Type : ACT_GATHER_INFO
2015-07-20	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201507-20.nasl - Type : ACT_GATHER_INFO
2015-07-08	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2015-556.nasl - Type : ACT_GATHER_INFO
2015-07-06	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20150629_postgresql_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2015-06-30	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2015-1194.nasl - Type : ACT_GATHER_INFO
2015-06-30	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2015-1194.nasl - Type : ACT_GATHER_INFO
2015-06-30	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2015-1194.nasl - Type : ACT_GATHER_INFO
2015-06-23	Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2015-1091-1.nasl - Type : ACT_GATHER_INFO
2015-06-18	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2015-546.nasl - Type : ACT_GATHER_INFO
2015-06-18	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2015-545.nasl - Type : ACT_GATHER_INFO
2015-06-01	Name : The remote Debian host is missing a security update. File : debian_DLA-227.nasl - Type : ACT_GATHER_INFO
2015-05-27	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2621-1.nasl - Type : ACT_GATHER_INFO
2015-05-27	Name : The remote database server is affected by multiple vulnerabilities. File : postgresql_20150522.nasl - Type : ACT_GATHER_INFO
2015-05-26	Name : The remote Debian host is missing a security-related update. File : debian_DSA-3269.nasl - Type : ACT_GATHER_INFO
2015-05-26	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_fc38cd8300b311e58ebd0026551a22dc.nasl - Type : ACT_GATHER_INFO
2015-05-26	Name : The remote Debian host is missing a security-related update. File : debian_DSA-3270.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2015-05-31 09:24:33	Multiple Updates
2015-05-29 21:29:27	Multiple Updates
2015-05-28 21:30:12	Multiple Updates
2015-05-27 13:26:58	Multiple Updates
2015-05-22 21:27:36	First insertion

Global Informations

Type	Count
CWE ID(s)	2
CPE ID(s)	345
IAVM(s)	1
Nessus® Exploit(s)	18

	Related
9.8	CVE-2015-3166
7.5	CVE-2015-3167
4.3	CVE-2015-3165
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 3 more Alert(s)

4.3 - DSA-3269

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

CPE : Common Platform Enumeration

Information Assurance Vulnerability Management (IAVM)

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU