CVE-2014-8161

CVE-2014-8161: falha em PostgreSQL

Publicada em 27 jan 2020 · Atualizada em 06 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 2.5%

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.

Produtos afetados

PostgreSQL Global Development Group · PostgreSQL

CVEs relacionadas — PostgreSQL

No mesmo produto, das mais perigosas para as menos.

CVE-2015-0241—CVE-2015-0241EPSS 5.5%CVE-2015-0242—CVE-2015-0242EPSS 5.1%CVE-2015-0243—CVE-2015-0243EPSS 5.1%CVE-2015-3166—CVE-2015-3166EPSS 4.6%CVE-2015-0244—CVE-2015-0244EPSS 4.4%CVE-2015-3167—CVE-2015-3167EPSS 4.1%

Referências

http://www.debian.org/security/2015/dsa-3155 http://www.postgresql.org/about/news/1569/http://www.postgresql.org/docs/9.4/static/release-9-4-1.html http://www.postgresql.org/docs/current/static/release-9-0-19.html http://www.postgresql.org/docs/current/static/release-9-1-15.html http://www.postgresql.org/docs/current/static/release-9-2-10.html http://www.postgresql.org/docs/current/static/release-9-3-6.html