A double-free flaw was found in the way PostgreSQL handled connections. An unauthenticated attacker could possibly exploit this flaw to crash the PostgreSQL backend by disconnecting at approximately the same time as the authentication time out was triggered.
Platform | Package | Release Date | Advisory |
---|---|---|---|
Amazon Linux 1 | postgresql8 | 2015-07-07 12:29 | ALAS-2015-556 |
Amazon Linux 1 | postgresql92 | 2015-06-16 10:29 | ALAS-2015-545 |
Amazon Linux 1 | postgresql93 | 2015-06-16 10:29 | ALAS-2015-546 |
Score Type | Score | Vector | |
---|---|---|---|
Amazon Linux | CVSSv2 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
NVD | CVSSv2 | 4.3 | AV:N/AC:M/Au:N/C:N/I:N/A:P |