The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause a denial of service (server crash) or read arbitrary server memory via a "too-short" salt.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Oct 26, 2015 |
| Centos_linux | — | Upgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-upgradeUpgrade postgresql-libs | Dec 1, 2016 | Oct 26, 2015 |
| Debian | — | Upgrade postgresql-9.4Upgrade postgresql-9.1 | Feb 13, 2016 | Oct 26, 2015 |
| Freebsd | — | Upgrade postgresql93-serverUpgrade postgresql94-serverUpgrade postgresql91-serverUpgrade postgresql90-serverUpgrade postgresql92-server | Dec 10, 2025 | Oct 8, 2015 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Oct 26, 2015 |
| Oracle_linux | — | Upgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-plpython | Oct 16, 2024 | Oct 26, 2015 |
| Postgres | — | Upgrade to PostgreSQL version 9.4.5 | Oct 15, 2015 | Oct 15, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 8, 2015 |
| Suse | — | Upgrade postgresql93-serverUpgrade postgresql94-serverUpgrade postgresql10-contribUpgrade postgresql96Upgrade libpq5Upgrade postgresql10-serverUpgrade postgresql91-serverUpgrade postgresql93-contribUpgrade libecpg6Upgrade postgresql10Upgrade postgresql96-serverUpgrade postgresql94Upgrade postgresql91-develUpgrade postgresql-initUpgrade postgresql93-develUpgrade postgresql96-develUpgrade postgresql10-docsUpgrade postgresql94-contribUpgrade postgresql96-docsUpgrade postgresql94-develUpgrade postgresql93Upgrade postgresql10-plpythonUpgrade postgresql96-contribUpgrade postgresql91-docsUpgrade postgresql91Upgrade postgresql91-contribUpgrade postgresql10-develUpgrade postgresql94-docsUpgrade postgresql10-plperlUpgrade postgresql10-pltclUpgrade libpq5-32bitUpgrade postgresql93-docs | Dec 18, 2015 | Oct 26, 2015 |
| Ubuntu | — | Upgrade postgresql-9.1Upgrade postgresql-9.4Upgrade postgresql-9.3 | Nov 8, 2024 | Oct 26, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub