CVEvulnerability

CVE-2016-0773

7.5 HIGH Published 2016-02-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-02-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119

Description

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode character range in a regular expression.

Affected configurations

• postgresql postgresql (<= 9.1.19) • postgresql postgresql 9.2 • postgresql postgresql 9.2.1 • postgresql postgresql 9.2.2 • postgresql postgresql 9.2.3 • postgresql postgresql 9.2.4 • postgresql postgresql 9.2.5 • postgresql postgresql 9.2.6 • postgresql postgresql 9.2.7 • postgresql postgresql 9.2.8 • postgresql postgresql 9.2.9 • postgresql postgresql 9.2.10 • postgresql postgresql 9.2.11 • postgresql postgresql 9.2.12 • postgresql postgresql 9.2.13 • postgresql postgresql 9.2.14 • postgresql postgresql 9.4 • postgresql postgresql 9.4.1 • postgresql postgresql 9.4.2 • postgresql postgresql 9.4.3 • postgresql postgresql 9.4.4 • postgresql postgresql 9.4.5 • postgresql postgresql 9.5 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 15.10 • debian debian linux 7.0 • debian debian linux 8.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References