Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - CVE-2015-3166 - Vulnerability Database
PostgreSQL

PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - CVE-2015-3166

Critical
Reference: CVE-2015-3166
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-3166
Title: PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Overview:

The snprintf implementation in PostgreSQL before 9.0.20 9.1.x before 9.1.16 9.2.x before 9.2.11 9.3.x before 9.3.7 and 9.4.x before 9.4.2 does not properly handle system-call errors which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors as demonstrated by an out-of-memory error.