CVE-2017-15098CWE-200

CVE-2017-15098: vulnerability in Red Hat, Inc. postgresql

Published · Updated

Follow this CVE+ Monitor postgresql+ Monitor postgresql15

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.7%
Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory.
Affected products
Red Hat, Inc. · postgresql
Related CVEs — Red Hat, Inc. postgresql

In the same product, most dangerous first.

CVE-2017-15099—CVE-2017-15099EPSS 6.3%CVE-2017-12172—CVE-2017-12172EPSS 0.6%