CVE-2015-3165
Publication date 22 May 2015
Last updated 24 July 2024
Ubuntu priority
Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL session at a time when the authentication timeout will expire during the session shutdown sequence.
Status
Package | Ubuntu Release | Status |
---|---|---|
postgresql-8.4 | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
postgresql-9.1 | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty |
Fixed 9.1.16-0ubuntu0.14.04
|
|
postgresql-9.3 | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty |
Fixed 9.3.7-0ubuntu0.14.04
|
|
postgresql-9.4 | ||
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
References
Related Ubuntu Security Notices (USN)
- USN-2621-1
- PostgreSQL vulnerabilities
- 25 May 2015