CVE-2015-3166
The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11...
CVE-2015-3166 is a critical vulnerability (CVSS 9.8) in Postgresql, published May 22, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.61%, the 91st percentile. Fixed in postgresql-8.4 8.4.22lts2-0+deb6u2.
The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, as demonstrated by an out-of-memory error.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
9.8
The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, as demonstrated by an out-of-memory error.
- Record
CVE-2015-3166- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, as demonstrated by an out-of-memory error.
- Record
CVE-2015-3166- Updated
- 2026-11-02
EUVDEUVD-2015-3244 No score
The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, as demonstrated by an out-of-memory error.
- Record
EUVD-2015-3244- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-65w5-rcgr-gxgj No score
The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11...
The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, as demonstrated by an out-of-memory error.
- Record
GHSA-65w5-rcgr-gxgj- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-3166
9.8
The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, as demonstrated by an out-of-memory error.
- Record
UBUNTU-CVE-2015-3166- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2015-0250 No score
Updated postgresql package fixes security vulnerability
Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL session at a time when the authentication timeout will expire during the session shutdown sequence (CVE-2015-3165).
The replacement implementation of snprintf() failed to check for errors reported by the underlying system library calls; the main case that might be missed is out-of-memory situations. In the worst case this might lead to information exposure (CVE-2015-3166).
In contrib/pgcrypto, some cases of decryption with an incorrect key could report other error message texts, possibly leading to a side-channel key exposure (CVE-2015-3167).
The postgresql9.0, postgresql9.1, postgresql9.2, and postgresql9.3 packages have been updated to versions 9.0.22, 9.1.18, 9.2.13, and 9.3.9, respectively, fixing these issues, as well as some data corruption issues. See the upstream release notes for more details.
- Record
MGASA-2015-0250- Updated
- 2026-11-02
Show 6 moreShow less
OSVopenSUSE-SU-2024:10030-1 No score
postgresql94-9.4.10-1.1 on GA media
These are all security issues fixed in the postgresql94-9.4.10-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10030-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10256-1 No score
postgresql93-9.3.15-1.1 on GA media
These are all security issues fixed in the postgresql93-9.3.15-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10256-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10273-1 No score
libecpg6-32bit-9.5.4-1.2 on GA media
These are all security issues fixed in the libecpg6-32bit-9.5.4-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10273-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1091-1 No score
Security update for postgresql91
This update provides PostgreSQL 9.1.18, which brings fixes for security issues and other enhancements.
The following vulnerabilities have been fixed:
* CVE-2015-3165: Avoid possible crash when client disconnects.
(bsc#931972)
* CVE-2015-3166: Consistently check for failure of the *printf().
(bsc#931973)
* CVE-2015-3167: In contrib/pgcrypto, uniformly report decryption
failures. (bsc#931974)
For a comprehensive list of changes, please refer to http://www.postgresql.org/docs/9.1/static/release-9-1-18.html http://www.postgresql.org/docs/9.1/static/release-9-1-18.html .
This update also includes changes in PostgreSQL's packaging to prepare for the migration to the new major version 9.4. (FATE#316970, bsc#907651)
Security Issues:
* CVE-2015-3165
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3165>
* CVE-2015-3166
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3166>
* CVE-2015-3167
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3167>
- Record
SUSE-SU-2015:1091-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1264-1 No score
Security update for postgresql93
PostgreSQL was updated to the security and bugfix release 9.3.8 including 9.3.7.
Security issues fixed:
- CVE-2015-3165, bsc#931972: Avoid possible crash when client disconnects just before the authentication timeout expires.
- CVE-2015-3166, bsc#931973: Consistently check for failure of the printf() family of functions.
- CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report decryption failures as 'Wrong key or corrupt data'
Bugs fixed:
- Protect against wraparound of multixact member IDs.
- Avoid failures while fsync'ing data directory during crash restart.
- Fix pg_get_functiondef() to show functions' LEAKPROOF property, if set.
- Allow libpq to use TLS protocol versions beyond v1.
- For the full release notes, see the following two URLs http://www.postgresql.org/docs/9.3/static/release-9-3-8.html http://www.postgresql.org/docs/9.3/static/release-9-3-7.html
- Record
SUSE-SU-2015:1264-1- Updated
- 2026-11-02
OSVUSN-2621-1 No score
postgresql-9.1, postgresql-9.3, postgresql-9.4 vulnerabilities
Benkocs Norbert Attila discovered that PostgreSQL incorrectly handled authentication timeouts. A remote attacker could use this flaw to cause the unauthenticated session to crash, possibly leading to a security issue. (CVE-2015-3165)
Noah Misch discovered that PostgreSQL incorrectly handled certain standard library function return values, possibly leading to security issues. (CVE-2015-3166)
Noah Misch discovered that the pgcrypto function could return different error messages when decrypting using an incorrect key, possibly leading to a security issue. (CVE-2015-3167)
- Record
USN-2621-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
postgresql-8.4Debian:6.0 |
before 8.4.22lts2-0+deb6u2, plus listed versions 8.4.10-0squeeze18.4.10-0squeeze1~bpo50+18.4.10-18.4.11-0squeeze18.4.11-1 Show 40 moreShow less8.4.12-0squeeze18.4.12-18.4.12-28.4.12-38.4.13-0squeeze18.4.13-18.4.14-18.4.15-0squeeze18.4.15-18.4.16-0squeeze18.4.16-18.4.17-0squeeze18.4.17-18.4.18-0squeeze18.4.18-0wheezy18.4.19-0squeeze18.4.19-0wheezy18.4.20-0squeeze18.4.20-0wheezy18.4.21-0squeeze18.4.21-0wheezy18.4.22-0wheezy18.4.5-0squeeze28.4.5-18.4.5-1~bpo50+18.4.5-28.4.5-2~bpo50+18.4.6-18.4.7-0squeeze1~bpo50+18.4.7-0squeeze28.4.7-18.4.8-0squeeze18.4.8-0squeeze1~bpo50+18.4.8-0squeeze28.4.8-0squeeze2~bpo50+18.4.8-18.4.8-28.4.9-0squeeze18.4.9-0squeeze1~bpo50+18.4.9-1 |
8.4.22lts2-0+deb6u2 |
postgresql-9.1Debian:7 |
before 9.1.16-0+deb7u1, plus listed versions 9.1.10-0wheezy19.1.10-19.1.11-0wheezy19.1.11-19.1.11-1~bpo60+1 Show 16 moreShow less9.1.11-29.1.12-0wheezy19.1.12-0wheezy1~bpo60+19.1.12-19.1.13-0wheezy19.1.13-0wheezy1~bpo60+19.1.13-19.1.14-0+deb7u19.1.14-0wheezy19.1.15-0+deb7u19.1.15-0+deb7u1~bpo60+19.1.9-19.1.9-29.1.9-39.1.9-49.1.9-5 |
9.1.16-0+deb7u1 |
postgresql-9.1Debian:8 |
before 9.1.16-0+deb8u1, plus listed versions 9.1.15-0+deb8u1 |
9.1.16-0+deb8u1 |
postgresql-9.4Debian:8 |
before 9.4.2-0+deb8u1, plus listed versions 9.4.1-1 |
9.4.2-0+deb8u1 |
postgresql9.0Mageia:4 |
before 9.0.22-1.mga4 | 9.0.22-1.mga4 |
postgresql9.1Mageia:4 |
before 9.1.18-1.mga4 | 9.1.18-1.mga4 |
postgresql9.2Mageia:4 |
before 9.2.13-1.mga4 | 9.2.13-1.mga4 |
postgresql9.3Mageia:4 |
before 9.3.9-1.mga4 | 9.3.9-1.mga4 |
postgresqlRed Hat:enterprise_linux:6::client |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-debuginfoRed Hat:enterprise_linux:6::client |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
Show 150 moreShow less
| Package | Affected | Fixed |
|---|---|---|
postgresql-libsRed Hat:enterprise_linux:6::client |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-contribRed Hat:enterprise_linux:6::client |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-develRed Hat:enterprise_linux:6::client |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-docsRed Hat:enterprise_linux:6::client |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-plperlRed Hat:enterprise_linux:6::client |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-plpythonRed Hat:enterprise_linux:6::client |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-pltclRed Hat:enterprise_linux:6::client |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-serverRed Hat:enterprise_linux:6::client |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-testRed Hat:enterprise_linux:6::client |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresqlRed Hat:enterprise_linux:6::computenode |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-libsRed Hat:enterprise_linux:6::computenode |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-contribRed Hat:enterprise_linux:6::computenode |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-develRed Hat:enterprise_linux:6::computenode |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-docsRed Hat:enterprise_linux:6::computenode |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-plperlRed Hat:enterprise_linux:6::computenode |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-plpythonRed Hat:enterprise_linux:6::computenode |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-pltclRed Hat:enterprise_linux:6::computenode |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-serverRed Hat:enterprise_linux:6::computenode |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-testRed Hat:enterprise_linux:6::computenode |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresqlRed Hat:enterprise_linux:6::server |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-contribRed Hat:enterprise_linux:6::server |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-debuginfoRed Hat:enterprise_linux:6::server |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-develRed Hat:enterprise_linux:6::server |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-docsRed Hat:enterprise_linux:6::server |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-libsRed Hat:enterprise_linux:6::server |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-plperlRed Hat:enterprise_linux:6::server |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-plpythonRed Hat:enterprise_linux:6::server |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-pltclRed Hat:enterprise_linux:6::server |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-serverRed Hat:enterprise_linux:6::server |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-testRed Hat:enterprise_linux:6::server |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresqlRed Hat:enterprise_linux:6::workstation |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-contribRed Hat:enterprise_linux:6::workstation |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-develRed Hat:enterprise_linux:6::workstation |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-docsRed Hat:enterprise_linux:6::workstation |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-libsRed Hat:enterprise_linux:6::workstation |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-plperlRed Hat:enterprise_linux:6::workstation |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-plpythonRed Hat:enterprise_linux:6::workstation |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-pltclRed Hat:enterprise_linux:6::workstation |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-serverRed Hat:enterprise_linux:6::workstation |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresql-testRed Hat:enterprise_linux:6::workstation |
before 0:8.4.20-3.el6_6 | 0:8.4.20-3.el6_6 |
postgresqlRed Hat:enterprise_linux:7::client |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-contribRed Hat:enterprise_linux:7::client |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-debuginfoRed Hat:enterprise_linux:7::client |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-develRed Hat:enterprise_linux:7::client |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-docsRed Hat:enterprise_linux:7::client |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-libsRed Hat:enterprise_linux:7::client |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-plperlRed Hat:enterprise_linux:7::client |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-plpythonRed Hat:enterprise_linux:7::client |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-pltclRed Hat:enterprise_linux:7::client |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-serverRed Hat:enterprise_linux:7::client |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-testRed Hat:enterprise_linux:7::client |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-upgradeRed Hat:enterprise_linux:7::client |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresqlRed Hat:enterprise_linux:7::computenode |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-libsRed Hat:enterprise_linux:7::computenode |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-contribRed Hat:enterprise_linux:7::computenode |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-develRed Hat:enterprise_linux:7::computenode |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-docsRed Hat:enterprise_linux:7::computenode |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-plperlRed Hat:enterprise_linux:7::computenode |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-plpythonRed Hat:enterprise_linux:7::computenode |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-pltclRed Hat:enterprise_linux:7::computenode |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-serverRed Hat:enterprise_linux:7::computenode |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-testRed Hat:enterprise_linux:7::computenode |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-upgradeRed Hat:enterprise_linux:7::computenode |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresqlRed Hat:enterprise_linux:7::server |
before 0:9.2.13-1.ael7b_1 | 0:9.2.13-1.ael7b_1 |
postgresql-contribRed Hat:enterprise_linux:7::server |
before 0:9.2.13-1.ael7b_1 | 0:9.2.13-1.ael7b_1 |
postgresql-debuginfoRed Hat:enterprise_linux:7::server |
before 0:9.2.13-1.ael7b_1 | 0:9.2.13-1.ael7b_1 |
postgresql-develRed Hat:enterprise_linux:7::server |
before 0:9.2.13-1.ael7b_1 | 0:9.2.13-1.ael7b_1 |
postgresql-docsRed Hat:enterprise_linux:7::server |
before 0:9.2.13-1.ael7b_1 | 0:9.2.13-1.ael7b_1 |
postgresql-libsRed Hat:enterprise_linux:7::server |
before 0:9.2.13-1.ael7b_1 | 0:9.2.13-1.ael7b_1 |
postgresql-plperlRed Hat:enterprise_linux:7::server |
before 0:9.2.13-1.ael7b_1 | 0:9.2.13-1.ael7b_1 |
postgresql-plpythonRed Hat:enterprise_linux:7::server |
before 0:9.2.13-1.ael7b_1 | 0:9.2.13-1.ael7b_1 |
postgresql-pltclRed Hat:enterprise_linux:7::server |
before 0:9.2.13-1.ael7b_1 | 0:9.2.13-1.ael7b_1 |
postgresql-serverRed Hat:enterprise_linux:7::server |
before 0:9.2.13-1.ael7b_1 | 0:9.2.13-1.ael7b_1 |
postgresql-testRed Hat:enterprise_linux:7::server |
before 0:9.2.13-1.ael7b_1 | 0:9.2.13-1.ael7b_1 |
postgresql-upgradeRed Hat:enterprise_linux:7::server |
before 0:9.2.13-1.ael7b_1 | 0:9.2.13-1.ael7b_1 |
postgresqlRed Hat:enterprise_linux:7::workstation |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-contribRed Hat:enterprise_linux:7::workstation |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-develRed Hat:enterprise_linux:7::workstation |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-docsRed Hat:enterprise_linux:7::workstation |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-libsRed Hat:enterprise_linux:7::workstation |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-plperlRed Hat:enterprise_linux:7::workstation |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-plpythonRed Hat:enterprise_linux:7::workstation |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-pltclRed Hat:enterprise_linux:7::workstation |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-serverRed Hat:enterprise_linux:7::workstation |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-testRed Hat:enterprise_linux:7::workstation |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql-upgradeRed Hat:enterprise_linux:7::workstation |
before 0:9.2.13-1.el7_1 | 0:9.2.13-1.el7_1 |
postgresql92-postgresqlRed Hat:rhel_software_collections:2::el6 |
before 0:9.2.13-1.el6 | 0:9.2.13-1.el6 |
postgresql92-postgresql-contribRed Hat:rhel_software_collections:2::el6 |
before 0:9.2.13-1.el6 | 0:9.2.13-1.el6 |
postgresql92-postgresql-debuginfoRed Hat:rhel_software_collections:2::el6 |
before 0:9.2.13-1.el6 | 0:9.2.13-1.el6 |
postgresql92-postgresql-develRed Hat:rhel_software_collections:2::el6 |
before 0:9.2.13-1.el6 | 0:9.2.13-1.el6 |
postgresql92-postgresql-docsRed Hat:rhel_software_collections:2::el6 |
before 0:9.2.13-1.el6 | 0:9.2.13-1.el6 |
postgresql92-postgresql-libsRed Hat:rhel_software_collections:2::el6 |
before 0:9.2.13-1.el6 | 0:9.2.13-1.el6 |
postgresql92-postgresql-plperlRed Hat:rhel_software_collections:2::el6 |
before 0:9.2.13-1.el6 | 0:9.2.13-1.el6 |
postgresql92-postgresql-plpythonRed Hat:rhel_software_collections:2::el6 |
before 0:9.2.13-1.el6 | 0:9.2.13-1.el6 |
postgresql92-postgresql-pltclRed Hat:rhel_software_collections:2::el6 |
before 0:9.2.13-1.el6 | 0:9.2.13-1.el6 |
postgresql92-postgresql-serverRed Hat:rhel_software_collections:2::el6 |
before 0:9.2.13-1.el6 | 0:9.2.13-1.el6 |
postgresql92-postgresql-testRed Hat:rhel_software_collections:2::el6 |
before 0:9.2.13-1.el6 | 0:9.2.13-1.el6 |
postgresql92-postgresql-upgradeRed Hat:rhel_software_collections:2::el6 |
before 0:9.2.13-1.el6 | 0:9.2.13-1.el6 |
postgresql92-postgresqlRed Hat:rhel_software_collections:2::el7 |
before 0:9.2.13-1.el7 | 0:9.2.13-1.el7 |
postgresql92-postgresql-contribRed Hat:rhel_software_collections:2::el7 |
before 0:9.2.13-1.el7 | 0:9.2.13-1.el7 |
postgresql92-postgresql-debuginfoRed Hat:rhel_software_collections:2::el7 |
before 0:9.2.13-1.el7 | 0:9.2.13-1.el7 |
postgresql92-postgresql-develRed Hat:rhel_software_collections:2::el7 |
before 0:9.2.13-1.el7 | 0:9.2.13-1.el7 |
postgresql92-postgresql-docsRed Hat:rhel_software_collections:2::el7 |
before 0:9.2.13-1.el7 | 0:9.2.13-1.el7 |
postgresql92-postgresql-libsRed Hat:rhel_software_collections:2::el7 |
before 0:9.2.13-1.el7 | 0:9.2.13-1.el7 |
postgresql92-postgresql-plperlRed Hat:rhel_software_collections:2::el7 |
before 0:9.2.13-1.el7 | 0:9.2.13-1.el7 |
postgresql92-postgresql-plpythonRed Hat:rhel_software_collections:2::el7 |
before 0:9.2.13-1.el7 | 0:9.2.13-1.el7 |
postgresql92-postgresql-pltclRed Hat:rhel_software_collections:2::el7 |
before 0:9.2.13-1.el7 | 0:9.2.13-1.el7 |
postgresql92-postgresql-serverRed Hat:rhel_software_collections:2::el7 |
before 0:9.2.13-1.el7 | 0:9.2.13-1.el7 |
postgresql92-postgresql-testRed Hat:rhel_software_collections:2::el7 |
before 0:9.2.13-1.el7 | 0:9.2.13-1.el7 |
postgresql92-postgresql-upgradeRed Hat:rhel_software_collections:2::el7 |
before 0:9.2.13-1.el7 | 0:9.2.13-1.el7 |
rh-postgresql94-postgresqlRed Hat:rhel_software_collections:2::el6 |
before 0:9.4.4-1.el6 | 0:9.4.4-1.el6 |
rh-postgresql94-postgresql-contribRed Hat:rhel_software_collections:2::el6 |
before 0:9.4.4-1.el6 | 0:9.4.4-1.el6 |
rh-postgresql94-postgresql-debuginfoRed Hat:rhel_software_collections:2::el6 |
before 0:9.4.4-1.el6 | 0:9.4.4-1.el6 |
rh-postgresql94-postgresql-develRed Hat:rhel_software_collections:2::el6 |
before 0:9.4.4-1.el6 | 0:9.4.4-1.el6 |
rh-postgresql94-postgresql-docsRed Hat:rhel_software_collections:2::el6 |
before 0:9.4.4-1.el6 | 0:9.4.4-1.el6 |
rh-postgresql94-postgresql-libsRed Hat:rhel_software_collections:2::el6 |
before 0:9.4.4-1.el6 | 0:9.4.4-1.el6 |
rh-postgresql94-postgresql-plperlRed Hat:rhel_software_collections:2::el6 |
before 0:9.4.4-1.el6 | 0:9.4.4-1.el6 |
rh-postgresql94-postgresql-plpythonRed Hat:rhel_software_collections:2::el6 |
before 0:9.4.4-1.el6 | 0:9.4.4-1.el6 |
rh-postgresql94-postgresql-pltclRed Hat:rhel_software_collections:2::el6 |
before 0:9.4.4-1.el6 | 0:9.4.4-1.el6 |
rh-postgresql94-postgresql-serverRed Hat:rhel_software_collections:2::el6 |
before 0:9.4.4-1.el6 | 0:9.4.4-1.el6 |
rh-postgresql94-postgresql-testRed Hat:rhel_software_collections:2::el6 |
before 0:9.4.4-1.el6 | 0:9.4.4-1.el6 |
rh-postgresql94-postgresql-upgradeRed Hat:rhel_software_collections:2::el6 |
before 0:9.4.4-1.el6 | 0:9.4.4-1.el6 |
rh-postgresql94-postgresqlRed Hat:rhel_software_collections:2::el7 |
before 0:9.4.4-1.el7 | 0:9.4.4-1.el7 |
rh-postgresql94-postgresql-contribRed Hat:rhel_software_collections:2::el7 |
before 0:9.4.4-1.el7 | 0:9.4.4-1.el7 |
rh-postgresql94-postgresql-debuginfoRed Hat:rhel_software_collections:2::el7 |
before 0:9.4.4-1.el7 | 0:9.4.4-1.el7 |
rh-postgresql94-postgresql-develRed Hat:rhel_software_collections:2::el7 |
before 0:9.4.4-1.el7 | 0:9.4.4-1.el7 |
rh-postgresql94-postgresql-docsRed Hat:rhel_software_collections:2::el7 |
before 0:9.4.4-1.el7 | 0:9.4.4-1.el7 |
rh-postgresql94-postgresql-libsRed Hat:rhel_software_collections:2::el7 |
before 0:9.4.4-1.el7 | 0:9.4.4-1.el7 |
rh-postgresql94-postgresql-plperlRed Hat:rhel_software_collections:2::el7 |
before 0:9.4.4-1.el7 | 0:9.4.4-1.el7 |
rh-postgresql94-postgresql-plpythonRed Hat:rhel_software_collections:2::el7 |
before 0:9.4.4-1.el7 | 0:9.4.4-1.el7 |
rh-postgresql94-postgresql-pltclRed Hat:rhel_software_collections:2::el7 |
before 0:9.4.4-1.el7 | 0:9.4.4-1.el7 |
rh-postgresql94-postgresql-serverRed Hat:rhel_software_collections:2::el7 |
before 0:9.4.4-1.el7 | 0:9.4.4-1.el7 |
rh-postgresql94-postgresql-testRed Hat:rhel_software_collections:2::el7 |
before 0:9.4.4-1.el7 | 0:9.4.4-1.el7 |
rh-postgresql94-postgresql-upgradeRed Hat:rhel_software_collections:2::el7 |
before 0:9.4.4-1.el7 | 0:9.4.4-1.el7 |
postgresql93SUSE:Linux Enterprise Desktop 12 |
before 9.3.8-8.1 | 9.3.8-8.1 |
postgresql93-libsSUSE:Linux Enterprise Desktop 12 |
before 9.3.8-8.1 | 9.3.8-8.1 |
postgresql93-libsSUSE:Linux Enterprise Software Development Kit 12 |
before 9.3.8-8.1 | 9.3.8-8.1 |
postgresql93SUSE:Linux Enterprise Server 12 |
before 9.3.8-8.1 | 9.3.8-8.1 |
postgresql93-libsSUSE:Linux Enterprise Server 12 |
before 9.3.8-8.1 | 9.3.8-8.1 |
postgresql93SUSE:Linux Enterprise Server for SAP Applications 12 |
before 9.3.8-8.1 | 9.3.8-8.1 |
postgresql93-libsSUSE:Linux Enterprise Server for SAP Applications 12 |
before 9.3.8-8.1 | 9.3.8-8.1 |
postgresql-9.1Ubuntu:14.04:LTS |
before 9.1.16-0ubuntu0.14.04, plus listed versions 9.1.10-19.1.10-1bzr19.1.11-19.1.11-29.1.12-19.1.13-19.1.14-0ubuntu0.14.049.1.15-0ubuntu0.14.04 |
9.1.16-0ubuntu0.14.04 |
postgresql-9.3Ubuntu:14.04:LTS |
before 9.3.7-0ubuntu0.14.04, plus listed versions 9.3.1-19.3.2-19.3.2-1ubuntu19.3.2-1ubuntu29.3.3-1 Show 5 moreShow less9.3.3-1bzr19.3.3-1bzr29.3.4-19.3.5-0ubuntu0.14.04.19.3.6-0ubuntu0.14.04 |
9.3.7-0ubuntu0.14.04 |
postgresql94openSUSE:Tumbleweed |
before 9.4.10-1.1 | 9.4.10-1.1 |
postgresql93openSUSE:Tumbleweed |
before 9.3.15-1.1 | 9.3.15-1.1 |
postgresql95openSUSE:Tumbleweed |
before 9.5.4-1.2 | 9.5.4-1.2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
postgresql.org/about/news/1587
postgresql.org/docs/9.0/static/release-9-0-20.html
postgresql.org/docs/9.1/static/release-9-1-16.html
postgresql.org/docs/9.2/static/release-9-2-11.html
postgresql.org/docs/9.3/static/release-9-3-7.html
postgresql.org/docs/9.4/static/release-9-4-2.html
Show 80 moreShow less
debian.org/security/2015/dsa-3269
debian.org/security/2015/dsa-3270
ubuntu.com/usn/usn-2621-1
nvd.nist.gov/vuln/detail/CVE-2015-3166
github.com/advisories/GHSA-65w5-rcgr-gxgj
advisories.mageia.org/MGASA-2015-0250.html
bugs.mageia.org/show_bug.cgi?id=16027
postgresql.org/about/news/1590
postgresql.org/about/news/1592
access.redhat.com/errata/RHSA-2015:1194
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1221537
bugzilla.redhat.com/show_bug.cgi?id=1221539
bugzilla.redhat.com/show_bug.cgi?id=1221541
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1194.json
access.redhat.com/security/cve/CVE-2015-3165
cve.org/CVERecord?id=CVE-2015-3165
nvd.nist.gov/vuln/detail/CVE-2015-3165
access.redhat.com/security/cve/CVE-2015-3166
cve.org/CVERecord?id=CVE-2015-3166
access.redhat.com/security/cve/CVE-2015-3167
cve.org/CVERecord?id=CVE-2015-3167
nvd.nist.gov/vuln/detail/CVE-2015-3167
access.redhat.com/errata/RHSA-2015:1195
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1195.json
access.redhat.com/errata/RHSA-2015:1196
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1196.json
suse.com/support/update/announcement/2015/suse-su-20151091-1
bugzilla.suse.com/907651
bugzilla.suse.com/931972
bugzilla.suse.com/931973
bugzilla.suse.com/931974
bugzilla.suse.com/932040
suse.com/security/cve/CVE-2015-3165
suse.com/security/cve/CVE-2015-3166
suse.com/security/cve/CVE-2015-3167
suse.com/support/update/announcement/2015/suse-su-20151264-1
ubuntu.com/security/CVE-2015-3166
ubuntu.com/security/notices/USN-2621-1
ubuntu.com/security/CVE-2015-3165
ubuntu.com/security/CVE-2015-3167
suse.com/security/cve/CVE-2007-4772
suse.com/security/cve/CVE-2007-6600
suse.com/security/cve/CVE-2009-4034
suse.com/security/cve/CVE-2009-4136
suse.com/security/cve/CVE-2010-1169
suse.com/security/cve/CVE-2010-1170
suse.com/security/cve/CVE-2010-3433
suse.com/security/cve/CVE-2012-0866
suse.com/security/cve/CVE-2012-0867
suse.com/security/cve/CVE-2012-0868
suse.com/security/cve/CVE-2012-2143
suse.com/security/cve/CVE-2012-2655
suse.com/security/cve/CVE-2012-3488
suse.com/security/cve/CVE-2012-3489
suse.com/security/cve/CVE-2013-0255
suse.com/security/cve/CVE-2013-1899
suse.com/security/cve/CVE-2013-1900
suse.com/security/cve/CVE-2013-1901
suse.com/security/cve/CVE-2014-0060
suse.com/security/cve/CVE-2014-0061
suse.com/security/cve/CVE-2014-0062
suse.com/security/cve/CVE-2014-0063
suse.com/security/cve/CVE-2014-0064
suse.com/security/cve/CVE-2014-0065
suse.com/security/cve/CVE-2014-0066
suse.com/security/cve/CVE-2014-0067
suse.com/security/cve/CVE-2015-5288
suse.com/security/cve/CVE-2015-5289
suse.com/security/cve/CVE-2016-0766
suse.com/security/cve/CVE-2016-0773
suse.com/security/cve/CVE-2016-5423
suse.com/security/cve/CVE-2016-5424
suse.com/security/cve/CVE-2014-8161
suse.com/security/cve/CVE-2015-0241
suse.com/security/cve/CVE-2015-0242
suse.com/security/cve/CVE-2015-0243
suse.com/security/cve/CVE-2015-0244
suse.com/security/cve/CVE-2016-2193
suse.com/security/cve/CVE-2016-3065