The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server memory information or cause a denial of service (server crash) via a crafted bytea value in a BRIN index page.
The MITRE CVE dictionary describes this issue as:
Find out more about CVE-2016-3065 from the MITRE CVE dictionary dictionary and NIST NVD.
NOTE: The following CVSS v2 metrics and score provided are preliminary and subject to review.
Base Score | 4.9 |
---|---|
Base Metrics | AV:N/AC:M/Au:S/C:P/I:N/A:P |
Access Vector | Network |
Access Complexity | Medium |
Authentication | Single |
Confidentiality Impact | Partial |
Integrity Impact | None |
Availability Impact | Partial |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Platform | Package | State |
---|---|---|
Red Hat Software Collections for Red Hat Enterprise Linux | rh-postgresql94-postgresql | Not affected |
Red Hat Software Collections for Red Hat Enterprise Linux | rh-postgresql95-postgresql | Not affected |
Red Hat Software Collections for Red Hat Enterprise Linux | postgresql92-postgresql | Not affected |
Red Hat Satellite 5.7 | postgresql92-postgresql | Not affected |
Red Hat Enterprise Linux 7 | postgresql | Not affected |
Red Hat Enterprise Linux 6 | postgresql | Not affected |
Red Hat Enterprise Linux 5 | postgresql84 | Not affected |
Red Hat Enterprise Linux 5 | postgresql | Not affected |