Description

The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server memory information or cause a denial of service (server crash) via a crafted bytea value in a BRIN index page.

Remediation

References

CVE-2016-3065

Related Vulnerabilities

WordPress Plugin Testimonials by BestWebSoft Cross-Site Scripting (0.1.8)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2081)

Liferay DXP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-3594)

WebLogic CVE-2021-2394 Vulnerability (CVE-2021-2394)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3543)

Severity

Critical

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2016-3065