CVE-2015-3165
Public on 2015-05-28
Modified on 2015-07-07
Description
A double-free flaw was found in the way PostgreSQL handled connections. An unauthenticated attacker could possibly exploit this flaw to crash the PostgreSQL backend by disconnecting at approximately the same time as the authentication time out was triggered.
Severity
Medium
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 1 | postgresql8 | 2015-07-07 | ALAS-2015-556 | Fixed |
| Amazon Linux 1 | postgresql92 | 2015-06-16 | ALAS-2015-545 | Fixed |
| Amazon Linux 1 | postgresql93 | 2015-06-16 | ALAS-2015-546 | Fixed |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv2 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
| NVD | CVSSv2 | 4.3 | AV:N/AC:M/Au:N/C:N/I:N/A:P |