Description
The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server memory information or cause a denial of service (server crash) via a crafted bytea value in a BRIN index page.
Remediation
References
Related Vulnerabilities
WordPress 4.4.x Prototype Pollution (4.4 - 4.4.26)
PostgreSQL Other Vulnerability (CVE-2006-5540)
Oracle Database Server CVE-2014-6514 Vulnerability (CVE-2014-6514)
Jenkins Incorrect Authorization Vulnerability (CVE-2022-34175)
WordPress Plugin My Calendar Multiple Cross-Site Scripting Vulnerabilities (1.10.1)