{"id":"CVE-2015-3167","aliases":["DLA-227-1","DSA-3269-1","DSA-3270-1","EUVD-2015-3245","GHSA-xj65-3378-xxg3","MGASA-2015-0250","RHSA-2015:1194","RHSA-2015:1195","RHSA-2015:1196","SUSE-SU-2015:1091-1","SUSE-SU-2015:1264-1","UBUNTU-CVE-2015-3167","USN-2621-1","openSUSE-SU-2024:10030-1","openSUSE-SU-2024:10256-1","openSUSE-SU-2024:10273-1"],"status":"published","title":"contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x...","description":"contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for attackers to obtain the key via a brute force attack.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04126,"percentile":0.90887,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2015-05-22T00:00:00Z","modified":"2026-06-29T10:09:29Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.1","fixed_in":["9.1.16-0ubuntu0.14.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","fixed_in":["9.3.7-0ubuntu0.14.04"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"postgresql-8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.22lts2-0+deb6u2"}]}],"versions":["8.4.10-0squeeze1","8.4.10-0squeeze1~bpo50+1","8.4.10-1","8.4.11-0squeeze1","8.4.11-1","8.4.12-0squeeze1","8.4.12-1","8.4.12-2","8.4.12-3","8.4.13-0squeeze1","8.4.13-1","8.4.14-1","8.4.15-0squeeze1","8.4.15-1","8.4.16-0squeeze1","8.4.16-1","8.4.17-0squeeze1","8.4.17-1","8.4.18-0squeeze1","8.4.18-0wheezy1","8.4.19-0squeeze1","8.4.19-0wheezy1","8.4.20-0squeeze1","8.4.20-0wheezy1","8.4.21-0squeeze1","8.4.21-0wheezy1","8.4.22-0wheezy1","8.4.5-0squeeze2","8.4.5-1","8.4.5-1~bpo50+1","8.4.5-2","8.4.5-2~bpo50+1","8.4.6-1","8.4.7-0squeeze1~bpo50+1","8.4.7-0squeeze2","8.4.7-1","8.4.8-0squeeze1","8.4.8-0squeeze1~bpo50+1","8.4.8-0squeeze2","8.4.8-0squeeze2~bpo50+1","8.4.8-1","8.4.8-2","8.4.9-0squeeze1","8.4.9-0squeeze1~bpo50+1","8.4.9-1"],"bundled":3},{"source":"osv","ecosystem":"Debian:7","package":"postgresql-9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.16-0+deb7u1"}]}],"versions":["9.1.10-0wheezy1","9.1.10-1","9.1.11-0wheezy1","9.1.11-1","9.1.11-1~bpo60+1","9.1.11-2","9.1.12-0wheezy1","9.1.12-0wheezy1~bpo60+1","9.1.12-1","9.1.13-0wheezy1","9.1.13-0wheezy1~bpo60+1","9.1.13-1","9.1.14-0+deb7u1","9.1.14-0wheezy1","9.1.15-0+deb7u1","9.1.15-0+deb7u1~bpo60+1","9.1.9-1","9.1.9-2","9.1.9-3","9.1.9-4","9.1.9-5"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"postgresql-9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.16-0+deb8u1"}]}],"versions":["9.1.15-0+deb8u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"postgresql-9.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2-0+deb8u1"}]}],"versions":["9.4.1-1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:4","package":"postgresql9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.mga4"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:4","package":"postgresql9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.18-1.mga4"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:4","package":"postgresql9.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.13-1.mga4"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:4","package":"postgresql9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.9-1.mga4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.20-3.el6_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.ael7b_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.ael7b_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.ael7b_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.ael7b_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.ael7b_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.ael7b_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.ael7b_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.ael7b_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.ael7b_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.ael7b_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.ael7b_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.ael7b_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"postgresql92-postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"postgresql92-postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.13-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"rh-postgresql94-postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"rh-postgresql94-postgresql-upgrade","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.4-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"postgresql93","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.8-8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"postgresql93-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.8-8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"postgresql93-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.8-8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"postgresql93","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.8-8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"postgresql93-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.8-8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"postgresql93","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.8-8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"postgresql93-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.8-8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.16-0ubuntu0.14.04"}]}],"versions":["9.1.10-1","9.1.10-1bzr1","9.1.11-1","9.1.11-2","9.1.12-1","9.1.13-1","9.1.14-0ubuntu0.14.04","9.1.15-0ubuntu0.14.04"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.7-0ubuntu0.14.04"}]}],"versions":["9.3.1-1","9.3.2-1","9.3.2-1ubuntu1","9.3.2-1ubuntu2","9.3.3-1","9.3.3-1bzr1","9.3.3-1bzr2","9.3.4-1","9.3.5-0ubuntu0.14.04.1","9.3.6-0ubuntu0.14.04"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.7-0ubuntu0.14.04"}]}],"versions":["9.3.1-1","9.3.2-1","9.3.2-1ubuntu1","9.3.2-1ubuntu2","9.3.3-1","9.3.3-1bzr1","9.3.3-1bzr2","9.3.4-1","9.3.5-0ubuntu0.14.04.1","9.3.6-0ubuntu0.14.04"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.10-1.1"}]}],"bundled":35},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql93","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.15-1.1"}]}],"bundled":40},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql95","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-1.2"}]}],"bundled":37}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"postgresql","product":"postgresql"},{"vendor":"postgresql global development group","product":"postgresql"}],"references":[{"url":"http://www.postgresql.org/about/news/1587/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","web","report"]},{"url":"http://www.postgresql.org/docs/9.0/static/release-9-0-20.html","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/9.1/static/release-9-1-16.html","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/9.2/static/release-9-2-11.html","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/9.3/static/release-9-3-7.html","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/9.4/static/release-9-4-2.html","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3269","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3270","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"http://ubuntu.com/usn/usn-2621-1","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3167","tags":["advisory"]},{"url":"http://www.postgresql.org/about/news/1587"},{"url":"https://github.com/advisories/GHSA-xj65-3378-xxg3"},{"url":"https://advisories.mageia.org/MGASA-2015-0250.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16027","tags":["report"]},{"url":"http://www.postgresql.org/about/news/1590/","tags":["web"]},{"url":"http://www.postgresql.org/about/news/1592/","tags":["web"]},{"url":"https://www.debian.org/security/2015/dsa-3269","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1194","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1221537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1221539","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1221541","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1194.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3165","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3165","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3165","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3166","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3167","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3167","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1195","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1195.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1196","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1196.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151091-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/907651","tags":["report"]},{"url":"https://bugzilla.suse.com/931972","tags":["report"]},{"url":"https://bugzilla.suse.com/931973","tags":["report"]},{"url":"https://bugzilla.suse.com/931974","tags":["report"]},{"url":"https://bugzilla.suse.com/932040","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3167","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151264-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-3167","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2621-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-3165","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-3166","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3065","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-3167","description":"contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for attackers to obtain the key via a brute force attack.","status":"published","published":"2019-11-20T20:50:14Z","modified":"2024-08-06T05:39:31.906Z","updated_at":"2026-11-02T14:35:42.331636Z"}],"euvd":[{"id":"EUVD-2015-3245","description":"contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for attackers to obtain the key via a brute force attack.","status":"published","published":"2019-11-20T20:50:14Z","modified":"2024-08-06T05:39:31Z","updated_at":"2026-11-03T02:22:09.179399Z"}],"ghsa":[{"id":"GHSA-xj65-3378-xxg3","title":"contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x...","description":"contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for attackers to obtain the key via a brute force attack.","status":"published","published":"2022-05-24T17:01:36Z","modified":"2024-04-04T02:40:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:56:10.534826Z"}],"nvd":[{"id":"CVE-2015-3167","description":"contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for attackers to obtain the key via a brute force attack.","status":"published","published":"2019-11-20T21:15:11.523Z","modified":"2026-06-17T00:25:27.28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:19.73542Z"}],"osv":[{"id":"UBUNTU-CVE-2015-3167","description":"contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for attackers to obtain the key via a brute force attack.","status":"published","published":"2015-05-22T00:00:00Z","modified":"2026-04-22T10:06:49.493423Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"DLA-227-1","title":"postgresql-8.4 - security update","status":"published","published":"2015-05-26T00:00:00Z","modified":"2026-03-09T01:19:34.78734Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-3269-1","title":"postgresql-9.1 - security update","status":"published","published":"2015-05-22T00:00:00Z","modified":"2026-03-09T01:21:52.887841Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"DSA-3270-1","title":"postgresql-9.4 - security update","status":"published","published":"2015-05-22T00:00:00Z","modified":"2026-03-09T01:19:24.441879Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2015-0250","title":"Updated postgresql package fixes security vulnerability","description":"Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before\n9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2\nallows remote attackers to cause a denial of service (crash) by closing an\nSSL session at a time when the authentication timeout will expire during\nthe session shutdown sequence (CVE-2015-3165).\n\nThe replacement implementation of snprintf() failed to check for errors\nreported by the underlying system library calls; the main case that might\nbe missed is out-of-memory situations. In the worst case this might lead\nto information exposure (CVE-2015-3166).\n\nIn contrib/pgcrypto, some cases of decryption with an incorrect key could\nreport other error message texts, possibly leading to a side-channel key\nexposure (CVE-2015-3167).\n\nThe postgresql9.0, postgresql9.1, postgresql9.2, and postgresql9.3\npackages have been updated to versions 9.0.22, 9.1.18, 9.2.13, and 9.3.9,\nrespectively, fixing these issues, as well as some data corruption issues.\n See the upstream release notes for more details.\n","status":"published","published":"2015-07-01T12:40:22Z","modified":"2026-04-16T06:24:32.488529451Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10030-1","title":"postgresql94-9.4.10-1.1 on GA media","description":"These are all security issues fixed in the postgresql94-9.4.10-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:28:08.668099Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10256-1","title":"postgresql93-9.3.15-1.1 on GA media","description":"These are all security issues fixed in the postgresql93-9.3.15-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:24.407905Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10273-1","title":"libecpg6-32bit-9.5.4-1.2 on GA media","description":"These are all security issues fixed in the libecpg6-32bit-9.5.4-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:33:24.576512Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2015:1194","title":"Red Hat Security Advisory: postgresql security update","status":"published","published":"2024-09-13T10:36:18Z","modified":"2026-06-29T10:09:28Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1195","title":"Red Hat Security Advisory: postgresql92-postgresql security update","status":"published","published":"2024-09-13T10:36:50Z","modified":"2026-06-29T10:09:29Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1196","title":"Red Hat Security Advisory: rh-postgresql94-postgresql security update","status":"published","published":"2024-09-13T10:36:55Z","modified":"2026-06-29T10:09:29Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:1091-1","title":"Security update for postgresql91","description":"\nThis update provides PostgreSQL 9.1.18, which brings fixes for security \nissues and other enhancements.\n\nThe following vulnerabilities have been fixed:\n\n    * CVE-2015-3165: Avoid possible crash when client disconnects.\n      (bsc#931972)\n    * CVE-2015-3166: Consistently check for failure of the *printf().\n      (bsc#931973)\n    * CVE-2015-3167: In contrib/pgcrypto, uniformly report decryption\n      failures. (bsc#931974)\n\nFor a comprehensive list of changes, please refer to \nhttp://www.postgresql.org/docs/9.1/static/release-9-1-18.html\n\u003chttp://www.postgresql.org/docs/9.1/static/release-9-1-18.html\u003e .\n\nThis update also includes changes in PostgreSQL's packaging to prepare for \nthe migration to the new major version 9.4. (FATE#316970, bsc#907651)\n\nSecurity Issues:\n\n    * CVE-2015-3165\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3165\u003e\n    * CVE-2015-3166\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3166\u003e\n    * CVE-2015-3167\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3167\u003e\n\n","status":"published","published":"2015-06-11T14:04:18Z","modified":"2026-02-04T04:34:12.17942Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1264-1","title":"Security update for postgresql93","description":"\nPostgreSQL was updated to the security and bugfix release 9.3.8 including 9.3.7.\n\nSecurity issues fixed:\n\n* CVE-2015-3165, bsc#931972: Avoid possible crash when client disconnects just before the authentication timeout expires.\n* CVE-2015-3166, bsc#931973: Consistently check for failure of the printf() family of functions.\n* CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report decryption failures as 'Wrong key or corrupt data'\n\nBugs fixed:\n\n* Protect against wraparound of multixact member IDs.\n* Avoid failures while fsync'ing data directory during crash restart.\n* Fix pg_get_functiondef() to show functions' LEAKPROOF property, if set.\n* Allow libpq to use TLS protocol versions beyond v1.\n\n- For the full release notes, see the following two URLs\n  http://www.postgresql.org/docs/9.3/static/release-9-3-8.html\n  http://www.postgresql.org/docs/9.3/static/release-9-3-7.html\n","status":"published","published":"2015-06-24T11:25:40Z","modified":"2026-02-04T03:57:13.533369Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"USN-2621-1","title":"postgresql-9.1, postgresql-9.3, postgresql-9.4 vulnerabilities","description":"Benkocs Norbert Attila discovered that PostgreSQL incorrectly handled\nauthentication timeouts. A remote attacker could use this flaw to cause the\nunauthenticated session to crash, possibly leading to a security issue.\n(CVE-2015-3165)\n\nNoah Misch discovered that PostgreSQL incorrectly handled certain standard\nlibrary function return values, possibly leading to security issues.\n(CVE-2015-3166)\n\nNoah Misch discovered that the pgcrypto function could return different\nerror messages when decrypting using an incorrect key, possibly leading to\na security issue. (CVE-2015-3167)\n","status":"published","published":"2015-05-25T11:36:20Z","modified":"2026-04-22T09:13:57.473073Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}