Skip to content
OpenAdvisories
Unscored USN-2621-1 3 CVEs

postgresql-9.1, postgresql-9.3, postgresql-9.4 vulnerabilities

Published May 25, 2015 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Benkocs Norbert Attila discovered that PostgreSQL incorrectly handled
authentication timeouts. A remote attacker could use this flaw to cause the
unauthenticated session to crash, possibly leading to a security issue.
(CVE-2015-3165)

Noah Misch discovered that PostgreSQL incorrectly handled certain standard
library function return values, possibly leading to security issues.
(CVE-2015-3166)

Noah Misch discovered that the pgcrypto function could return different
error messages when decrypting using an incorrect key, possibly leading to
a security issue. (CVE-2015-3167)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS postgresql-9.3 9.3.7-0ubuntu0.14.04

Vulnerabilities 3

References

  • report
    https://ubuntu.com/security/CVE-2015-3165
  • report
    https://ubuntu.com/security/CVE-2015-3166
  • report
    https://ubuntu.com/security/CVE-2015-3167