onyx --cves cve-2015-3167
CVE-2015-3167
- score
- <0.1
- cvss
- 7.5
- epss
- 4.1%
- published
- 2019-11-20
- kev added
- —
- first seen
PostgreSQL contrib/pgcrypto before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 contains a vulnerability caused by inconsistent error responses when an incorrect key is used, letting attackers perform brute force attacks to obtain the key, exploit requires access to the database.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 9
- http://www.postgresql.org/about/news/1587/
- http://www.postgresql.org/docs/9.0/static/release-9-0-20.html
- http://www.postgresql.org/docs/9.1/static/release-9-1-16.html
- http://www.postgresql.org/docs/9.3/static/release-9-3-7.html
- http://www.postgresql.org/docs/9.4/static/release-9-4-2.html
- http://ubuntu.com/usn/usn-2621-1
- http://www.debian.org/security/2015/dsa-3270
- http://www.postgresql.org/docs/9.2/static/release-9-2-11.html
- http://www.debian.org/security/2015/dsa-3269