The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not validate token extraction for table names, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1352.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade php56-ftpUpgrade php55-pgsqlUpgrade php55-ftpUpgrade php55-domUpgrade php56-gdUpgrade php5-ftpUpgrade php55-gdUpgrade php56-domUpgrade php5-gdUpgrade php5-domUpgrade php5-pgsqlUpgrade php56-psql | Dec 10, 2025 | Jun 23, 2015 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | May 16, 2016 |
| Oracle_linux | — | Upgrade php55-php-mbstringUpgrade php54-php-xmlUpgrade php55-php-gmpUpgrade php54-php-bcmathUpgrade php54-phpUpgrade php54-php-imapUpgrade php55-php-pspellUpgrade php54-php-dbaUpgrade php54-php-gdUpgrade php54-php-pdoUpgrade php55-php-recodeUpgrade php55-phpUpgrade php55-php-pgsqlUpgrade php55-php-snmpUpgrade php54-php-soapUpgrade php54-php-processUpgrade php54-php-xmlrpcUpgrade php55-php-develUpgrade php55-php-opcacheUpgrade php55-php-mysqlndUpgrade php54-php-odbcUpgrade php55-php-fpmUpgrade php54-php-tidyUpgrade php55-php-soapUpgrade php54-php-mysqlndUpgrade php55-php-odbcUpgrade php54-php-mbstringUpgrade php54-php-enchantUpgrade php55-php-processUpgrade php54-php-develUpgrade php54-php-ldapUpgrade php54-php-recodeUpgrade php54-php-cliUpgrade php55-php-xmlrpcUpgrade php54-php-snmpUpgrade php55-php-intlUpgrade php54-php-pgsqlUpgrade php55-php-gdUpgrade php55-php-cliUpgrade php54-php-intlUpgrade php55-php-dbaUpgrade php55-php-commonUpgrade php55-php-ldapUpgrade php55-php-pdoUpgrade php55-php-enchantUpgrade php55-php-bcmathUpgrade php55-php-xmlUpgrade php54-php-fpmUpgrade php54-php-commonUpgrade php54-php-pspell | Oct 16, 2024 | May 16, 2016 |
| Php | — | Upgrade to PHP version 5.6.10Upgrade to PHP version 5.5.26Upgrade to PHP version 5.4.42 | Jun 3, 2016 | May 16, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 11, 2015 |
| Suse | — | Upgrade php53-xmlwriterUpgrade php53-fastcgiUpgrade php53-bz2Upgrade php5-mbstringUpgrade php5-tokenizerUpgrade php5-enchantUpgrade php5-domUpgrade php5-odbcUpgrade php5-iconvUpgrade apache2-mod_php53Upgrade php5-gdUpgrade php5-sqliteUpgrade php5-intlUpgrade php5-suhosinUpgrade php53-dbaUpgrade php53-jsonUpgrade php53-pearUpgrade php5-zlibUpgrade php5-exifUpgrade php5-fpmUpgrade php53-develUpgrade php53-exifUpgrade php53-pspellUpgrade php53-tokenizerUpgrade php5-pspellUpgrade php53-xmlrpcUpgrade php5-sysvshmUpgrade php53-intlUpgrade php5-dbaUpgrade php5-ldapUpgrade php53-xslUpgrade php53-gmpUpgrade php5-shmopUpgrade php53-opensslUpgrade php5-ctypeUpgrade php53-domUpgrade php53-mysqlUpgrade php5-fileinfoUpgrade php5-curlUpgrade php53Upgrade php5-pgsqlUpgrade php5-sysvmsgUpgrade php53-fileinfoUpgrade php53-shmopUpgrade php5-sysvsemUpgrade php53-sysvshmUpgrade php53-pgsqlUpgrade php5-wddxUpgrade php53-curlUpgrade php5-xslUpgrade php5-gettextUpgrade php5-jsonUpgrade php53-zlibUpgrade php5-zipUpgrade php53-gdUpgrade php53-sysvmsgUpgrade php5-snmpUpgrade php53-pcntlUpgrade php5-calendarUpgrade php5-mcryptUpgrade apache2-mod_php5Upgrade php53-gettextUpgrade php5-soapUpgrade php53-ldapUpgrade php53-ctypeUpgrade php53-suhosinUpgrade php53-iconvUpgrade php5-socketsUpgrade php5-develUpgrade php53-zipUpgrade php53-mbstringUpgrade php5-pdoUpgrade php5-bcmathUpgrade php53-mcryptUpgrade php53-wddxUpgrade php5Upgrade php53-bcmathUpgrade php5-ftpUpgrade php53-sysvsemUpgrade php53-odbcUpgrade php5-xmlwriterUpgrade php5-pcntlUpgrade php53-readlineUpgrade php5-mysqlUpgrade php53-snmpUpgrade php5-xmlreaderUpgrade php5-opensslUpgrade php5-bz2Upgrade php53-xmlreaderUpgrade php5-xmlrpcUpgrade php5-fastcgiUpgrade php53-tidyUpgrade php53-socketsUpgrade php53-soapUpgrade php53-sqliteUpgrade php53-ftpUpgrade php5-gmpUpgrade php53-imapUpgrade php53-calendarUpgrade php5-pearUpgrade php53-pdoUpgrade php53-posix | Dec 18, 2015 | Jul 17, 2015 |
| Ubuntu | — | Upgrade php5-cliUpgrade php5-cgiUpgrade libapache2-mod-php5Upgrade php5-fpm | Nov 8, 2024 | May 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub