The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server memory information or cause a denial of service (server crash) via a crafted bytea value in a BRIN index page.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade postgresql95-serverUpgrade postgresql95-contrib | Dec 10, 2025 | Mar 31, 2016 |
| Postgres | — | Upgrade to PostgreSQL version 9.5.2 | Apr 1, 2016 | Apr 1, 2016 |
| Suse | — | Upgrade postgresql10-serverUpgrade libpq5-32bitUpgrade postgresql96-contribUpgrade libpq5Upgrade postgresql96-serverUpgrade postgresql10-plperlUpgrade postgresql10-docsUpgrade postgresql10-develUpgrade postgresql96-docsUpgrade postgresql10Upgrade postgresql96-develUpgrade postgresql10-contribUpgrade libecpg6Upgrade postgresql10-pltclUpgrade postgresql10-plpythonUpgrade postgresql96 | Jul 21, 2017 | Apr 11, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub