CVE-2015-3165
Fixed in a distro release EPSS 8%
Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL session at a time when the authentication timeout will expire during the session shutdown sequence.
Products: canonical ubuntu_linux, debian_linux, apple mac_os_x_server, postgresql
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | postgresql-8.4 | 8.4.22lts2-0+deb6u2 |
| Debian 7 | postgresql-9.1 | 9.1.16-0+deb7u1 |
| Debian 8 | postgresql-9.1 | 9.1.16-0+deb8u1 |
| Debian 8 | postgresql-9.4 | 9.4.2-0+deb8u1 |
| Red Hat Enterprise Linux 6 | postgresql | 0:8.4.20-3.el6_6 |
| Red Hat Enterprise Linux 6 | postgresql-contrib | 0:8.4.20-3.el6_6 |
| Red Hat Enterprise Linux 6 | postgresql-debuginfo | 0:8.4.20-3.el6_6 |
| Red Hat Enterprise Linux 6 | postgresql-devel | 0:8.4.20-3.el6_6 |
| Red Hat Enterprise Linux 6 | postgresql-docs | 0:8.4.20-3.el6_6 |
| Red Hat Enterprise Linux 6 | postgresql-libs | 0:8.4.20-3.el6_6 |
| Red Hat Enterprise Linux 6 | postgresql-plperl | 0:8.4.20-3.el6_6 |
| Red Hat Enterprise Linux 6 | postgresql-plpython | 0:8.4.20-3.el6_6 |
| Red Hat Enterprise Linux 6 | postgresql-pltcl | 0:8.4.20-3.el6_6 |
| Red Hat Enterprise Linux 6 | postgresql-server | 0:8.4.20-3.el6_6 |
| Red Hat Enterprise Linux 6 | postgresql-test | 0:8.4.20-3.el6_6 |
| Red Hat Enterprise Linux 7 | postgresql | 0:9.2.13-1.el7_1 |
| Red Hat Enterprise Linux 7 | postgresql | 0:9.2.13-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | postgresql-contrib | 0:9.2.13-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | postgresql-contrib | 0:9.2.13-1.el7_1 |
| Red Hat Enterprise Linux 7 | postgresql-debuginfo | 0:9.2.13-1.el7_1 |
| Red Hat Enterprise Linux 7 | postgresql-debuginfo | 0:9.2.13-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | postgresql-devel | 0:9.2.13-1.el7_1 |
| Red Hat Enterprise Linux 7 | postgresql-devel | 0:9.2.13-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | postgresql-docs | 0:9.2.13-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | postgresql-docs | 0:9.2.13-1.el7_1 |
| Red Hat Enterprise Linux 7 | postgresql-libs | 0:9.2.13-1.el7_1 |
| Red Hat Enterprise Linux 7 | postgresql-libs | 0:9.2.13-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | postgresql-plperl | 0:9.2.13-1.el7_1 |
| Red Hat Enterprise Linux 7 | postgresql-plperl | 0:9.2.13-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | postgresql-plpython | 0:9.2.13-1.el7_1 |
| Red Hat Enterprise Linux 7 | postgresql-plpython | 0:9.2.13-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | postgresql-pltcl | 0:9.2.13-1.el7_1 |
| Red Hat Enterprise Linux 7 | postgresql-pltcl | 0:9.2.13-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | postgresql-server | 0:9.2.13-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | postgresql-server | 0:9.2.13-1.el7_1 |
| Red Hat Enterprise Linux 7 | postgresql-test | 0:9.2.13-1.el7_1 |
| Red Hat Enterprise Linux 7 | postgresql-test | 0:9.2.13-1.ael7b_1 |
| Red Hat Enterprise Linux 7 | postgresql-upgrade | 0:9.2.13-1.el7_1 |
| Red Hat Enterprise Linux 7 | postgresql-upgrade | 0:9.2.13-1.ael7b_1 |
| Red Hat rhel software collections 2 | postgresql92-postgresql | 0:9.2.13-1.el6 |
| Red Hat rhel software collections 2 | postgresql92-postgresql | 0:9.2.13-1.el7 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-contrib | 0:9.2.13-1.el6 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-contrib | 0:9.2.13-1.el7 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-debuginfo | 0:9.2.13-1.el7 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-debuginfo | 0:9.2.13-1.el6 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-devel | 0:9.2.13-1.el6 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-devel | 0:9.2.13-1.el7 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-docs | 0:9.2.13-1.el6 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-docs | 0:9.2.13-1.el7 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-libs | 0:9.2.13-1.el6 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-libs | 0:9.2.13-1.el7 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-plperl | 0:9.2.13-1.el6 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-plperl | 0:9.2.13-1.el7 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-plpython | 0:9.2.13-1.el7 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-plpython | 0:9.2.13-1.el6 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-pltcl | 0:9.2.13-1.el7 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-pltcl | 0:9.2.13-1.el6 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-server | 0:9.2.13-1.el6 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-server | 0:9.2.13-1.el7 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-test | 0:9.2.13-1.el6 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-test | 0:9.2.13-1.el7 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-upgrade | 0:9.2.13-1.el6 |
| Red Hat rhel software collections 2 | postgresql92-postgresql-upgrade | 0:9.2.13-1.el7 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql | 0:9.4.4-1.el6 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql | 0:9.4.4-1.el7 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-contrib | 0:9.4.4-1.el6 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-contrib | 0:9.4.4-1.el7 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-debuginfo | 0:9.4.4-1.el6 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-debuginfo | 0:9.4.4-1.el7 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-devel | 0:9.4.4-1.el6 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-devel | 0:9.4.4-1.el7 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-docs | 0:9.4.4-1.el6 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-docs | 0:9.4.4-1.el7 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-libs | 0:9.4.4-1.el6 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-libs | 0:9.4.4-1.el7 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-plperl | 0:9.4.4-1.el6 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-plperl | 0:9.4.4-1.el7 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-plpython | 0:9.4.4-1.el6 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-plpython | 0:9.4.4-1.el7 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-pltcl | 0:9.4.4-1.el6 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-pltcl | 0:9.4.4-1.el7 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-server | 0:9.4.4-1.el6 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-server | 0:9.4.4-1.el7 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-test | 0:9.4.4-1.el7 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-test | 0:9.4.4-1.el6 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-upgrade | 0:9.4.4-1.el7 |
| Red Hat rhel software collections 2 | rh-postgresql94-postgresql-upgrade | 0:9.4.4-1.el6 |
| SUSE Linux Enterprise Desktop 12 | postgresql93 | 9.3.8-8.1 |
| SUSE Linux Enterprise Desktop 12 | postgresql93-libs | 9.3.8-8.1 |
| SUSE Linux Enterprise Server 12 | postgresql93 | 9.3.8-8.1 |
| SUSE Linux Enterprise Server 12 | postgresql93-libs | 9.3.8-8.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | postgresql93 | 9.3.8-8.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | postgresql93-libs | 9.3.8-8.1 |
| SUSE Linux Enterprise Software Development Kit 12 | postgresql93-libs | 9.3.8-8.1 |
| Ubuntu 14.04 LTS | postgresql-9.1 | 9.1.16-0ubuntu0.14.04 |
| Ubuntu 14.04 LTS | postgresql-9.3 | 9.3.7-0ubuntu0.14.04 |
| openSUSE Tumbleweed | postgresql93 | 9.3.15-1.1 |
| openSUSE Tumbleweed | postgresql94 | 9.4.10-1.1 |
| openSUSE Tumbleweed | postgresql95 | 9.5.4-1.2 |