PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode character range in a regular expression.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Feb 17, 2016 |
| Amazon_linux | — | Upgrade postgresql94Upgrade postgresql93Upgrade postgresql92Upgrade postgresql8 | Apr 20, 2016 | Feb 17, 2016 |
| Centos_linux | — | Upgrade postgresql-plpythonUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-develUpgrade postgresql-docs | Jul 6, 2016 | Feb 17, 2016 |
| Debian | — | Upgrade postgresql-9.1Upgrade postgresql-9.4 | Feb 13, 2016 | Feb 13, 2016 |
| Freebsd | — | Upgrade postgresql95-serverUpgrade postgresql91-serverUpgrade postgresql92-serverUpgrade postgresql93-serverUpgrade postgresql94-server | Dec 10, 2025 | Feb 12, 2016 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Feb 17, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-devel | Nov 30, 2017 | Feb 17, 2016 |
| Oracle_linux | — | Upgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-server | Mar 4, 2016 | Feb 17, 2016 |
| Postgres | — | Upgrade to PostgreSQL version 9.5.1 | Feb 12, 2016 | Feb 12, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 11, 2016 |
| Suse | — | Upgrade postgresql93-serverUpgrade postgresql10-contribUpgrade postgresql94-contribUpgrade postgresql96-contribUpgrade postgresql10-pltclUpgrade postgresql93-docsUpgrade postgresql94-develUpgrade postgresql96-docsUpgrade postgresql96-develUpgrade postgresql10-develUpgrade postgresql10-plperlUpgrade libecpg6Upgrade postgresql10-plpythonUpgrade postgresql10-docsUpgrade postgresql94-serverUpgrade postgresql94-docsUpgrade postgresql93-contribUpgrade postgresql10-serverUpgrade postgresql96-serverUpgrade postgresql10Upgrade postgresql93-develUpgrade libpq5-32bitUpgrade libpq5Upgrade postgresql94Upgrade postgresql93Upgrade postgresql96 | Feb 22, 2016 | Feb 17, 2016 |
| Ubuntu | — | Upgrade postgresql-9.4Upgrade postgresql-9.3Upgrade postgresql-9.1 | Feb 17, 2016 | Feb 11, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub