CVE catalog

CVE-2015-5288

Security update for postgresql93

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
4.53% · Oct 25, 2026

The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause a denial of service (server crash) or read arbitrary server memory via a "too-short" salt.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntupostgresql-9.114.049.1.10-1vulnerable
Ubuntupostgresql-9.114.049.1.10-1bzr1vulnerable
Ubuntupostgresql-9.114.049.1.11-1vulnerable
Ubuntupostgresql-9.114.049.1.11-2vulnerable
Ubuntupostgresql-9.114.049.1.12-1vulnerable
Ubuntupostgresql-9.114.049.1.13-1vulnerable
Ubuntupostgresql-9.114.049.1.14-0ubuntu0.14.04vulnerable
Ubuntupostgresql-9.114.049.1.15-0ubuntu0.14.04vulnerable
Ubuntupostgresql-9.114.049.1.16-0ubuntu0.14.04vulnerable
Ubuntupostgresql-9.114.049.1.17-0ubuntu0.14.04vulnerable
Ubuntupostgresql-9.114.049.1.18-0ubuntu0.14.04vulnerable
Ubuntupostgresql-9.114.049.1.19-0ubuntu0.14.04fixed
Ubuntupostgresql-9.314.049.3.1-1vulnerable
Ubuntupostgresql-9.314.049.3.2-1vulnerable
Ubuntupostgresql-9.314.049.3.2-1ubuntu1vulnerable
Ubuntupostgresql-9.314.049.3.2-1ubuntu2vulnerable
Ubuntupostgresql-9.314.049.3.3-1vulnerable
Ubuntupostgresql-9.314.049.3.3-1bzr1vulnerable
Ubuntupostgresql-9.314.049.3.3-1bzr2vulnerable
Ubuntupostgresql-9.314.049.3.4-1vulnerable
Ubuntupostgresql-9.314.049.3.5-0ubuntu0.14.04.1vulnerable
Ubuntupostgresql-9.314.049.3.6-0ubuntu0.14.04vulnerable
Ubuntupostgresql-9.314.049.3.7-0ubuntu0.14.04vulnerable
Ubuntupostgresql-9.314.049.3.8-0ubuntu0.4.04vulnerable
Ubuntupostgresql-9.314.049.3.9-0ubuntu0.14.04vulnerable
Ubuntupostgresql-9.314.049.3.10-0ubuntu0.14.04fixed
Ubuntupostgresql-9.314.049.3.1-1vulnerable
Ubuntupostgresql-9.314.049.3.2-1vulnerable
Ubuntupostgresql-9.314.049.3.2-1ubuntu1vulnerable
Ubuntupostgresql-9.314.049.3.2-1ubuntu2vulnerable
Ubuntupostgresql-9.314.049.3.3-1vulnerable
Ubuntupostgresql-9.314.049.3.3-1bzr1vulnerable
Ubuntupostgresql-9.314.049.3.3-1bzr2vulnerable
Ubuntupostgresql-9.314.049.3.4-1vulnerable
Ubuntupostgresql-9.314.049.3.5-0ubuntu0.14.04.1vulnerable
Ubuntupostgresql-9.314.049.3.6-0ubuntu0.14.04vulnerable
Ubuntupostgresql-9.314.049.3.7-0ubuntu0.14.04vulnerable
Ubuntupostgresql-9.314.049.3.8-0ubuntu0.4.04vulnerable
Ubuntupostgresql-9.314.049.3.9-0ubuntu0.14.04vulnerable
Ubuntupostgresql-9.314.049.3.10-0ubuntu0.14.04fixed
Debianpostgresql-9.179.1.10-0wheezy1vulnerable
Debianpostgresql-9.179.1.10-1vulnerable
Debianpostgresql-9.179.1.11-0wheezy1vulnerable
Debianpostgresql-9.179.1.11-1vulnerable
Debianpostgresql-9.179.1.11-1~bpo60+1vulnerable
Debianpostgresql-9.179.1.11-2vulnerable
Debianpostgresql-9.179.1.12-0wheezy1vulnerable
Debianpostgresql-9.179.1.12-0wheezy1~bpo60+1vulnerable
Debianpostgresql-9.179.1.12-1vulnerable
Debianpostgresql-9.179.1.13-0wheezy1vulnerable
Debianpostgresql-9.179.1.13-0wheezy1~bpo60+1vulnerable
Debianpostgresql-9.179.1.13-1vulnerable
Debianpostgresql-9.179.1.14-0+deb7u1vulnerable
Debianpostgresql-9.179.1.14-0wheezy1vulnerable
Debianpostgresql-9.179.1.15-0+deb7u1vulnerable
Debianpostgresql-9.179.1.15-0+deb7u1~bpo60+1vulnerable
Debianpostgresql-9.179.1.16-0+deb7u1vulnerable
Debianpostgresql-9.179.1.16-0+deb7u2vulnerable
Debianpostgresql-9.179.1.17-0+deb7u1vulnerable
Debianpostgresql-9.179.1.18-0+deb7u1vulnerable
Debianpostgresql-9.179.1.19-0+deb7u1vulnerable
Debianpostgresql-9.179.1.9-1vulnerable
Debianpostgresql-9.179.1.9-2vulnerable
Debianpostgresql-9.179.1.9-3vulnerable
Debianpostgresql-9.179.1.9-4vulnerable
Debianpostgresql-9.179.1.9-5vulnerable
Debianpostgresql-9.179.1.20-0+deb7u1fixed
Debianpostgresql-9.489.4.1-1vulnerable
Debianpostgresql-9.489.4.2-0+deb8u1vulnerable
Debianpostgresql-9.489.4.2-1vulnerable
Debianpostgresql-9.489.4.3-0+deb8u1vulnerable
Debianpostgresql-9.489.4.3-1vulnerable
Debianpostgresql-9.489.4.4-0+deb8u1vulnerable
Debianpostgresql-9.489.4.4-1vulnerable
Debianpostgresql-9.489.4.4-2vulnerable
Debianpostgresql-9.489.4.5-0+deb8u1~bpo70+1vulnerable
Debianpostgresql-9.489.4.5-0+deb8u1fixed
Debianpostgresql-8.46.08.4.10-0squeeze1vulnerable
Debianpostgresql-8.46.08.4.10-0squeeze1~bpo50+1vulnerable
Debianpostgresql-8.46.08.4.10-1vulnerable
Debianpostgresql-8.46.08.4.11-0squeeze1vulnerable
Debianpostgresql-8.46.08.4.11-1vulnerable
Debianpostgresql-8.46.08.4.12-0squeeze1vulnerable
Debianpostgresql-8.46.08.4.12-1vulnerable
Debianpostgresql-8.46.08.4.12-2vulnerable
Debianpostgresql-8.46.08.4.12-3vulnerable
Debianpostgresql-8.46.08.4.13-0squeeze1vulnerable
Debianpostgresql-8.46.08.4.13-1vulnerable
Debianpostgresql-8.46.08.4.14-1vulnerable
Debianpostgresql-8.46.08.4.15-0squeeze1vulnerable
Debianpostgresql-8.46.08.4.15-1vulnerable
Debianpostgresql-8.46.08.4.16-0squeeze1vulnerable
Debianpostgresql-8.46.08.4.16-1vulnerable
Debianpostgresql-8.46.08.4.17-0squeeze1vulnerable
Debianpostgresql-8.46.08.4.17-1vulnerable
Debianpostgresql-8.46.08.4.18-0squeeze1vulnerable
Debianpostgresql-8.46.08.4.18-0wheezy1vulnerable
Debianpostgresql-8.46.08.4.19-0squeeze1vulnerable
Debianpostgresql-8.46.08.4.19-0wheezy1vulnerable
Debianpostgresql-8.46.08.4.20-0squeeze1vulnerable
Debianpostgresql-8.46.08.4.20-0wheezy1vulnerable
Debianpostgresql-8.46.08.4.21-0squeeze1vulnerable
Debianpostgresql-8.46.08.4.21-0wheezy1vulnerable
Debianpostgresql-8.46.08.4.22-0wheezy1vulnerable
Debianpostgresql-8.46.08.4.5-0squeeze2vulnerable
Debianpostgresql-8.46.08.4.5-1vulnerable
Debianpostgresql-8.46.08.4.5-1~bpo50+1vulnerable
Debianpostgresql-8.46.08.4.5-2vulnerable
Debianpostgresql-8.46.08.4.5-2~bpo50+1vulnerable
Debianpostgresql-8.46.08.4.6-1vulnerable
Debianpostgresql-8.46.08.4.7-0squeeze1~bpo50+1vulnerable
Debianpostgresql-8.46.08.4.7-0squeeze2vulnerable
Debianpostgresql-8.46.08.4.7-1vulnerable
Debianpostgresql-8.46.08.4.8-0squeeze1vulnerable
Debianpostgresql-8.46.08.4.8-0squeeze1~bpo50+1vulnerable
Debianpostgresql-8.46.08.4.8-0squeeze2vulnerable
Debianpostgresql-8.46.08.4.8-0squeeze2~bpo50+1vulnerable
Debianpostgresql-8.46.08.4.8-1vulnerable
Debianpostgresql-8.46.08.4.8-2vulnerable
Debianpostgresql-8.46.08.4.9-0squeeze1vulnerable
Debianpostgresql-8.46.08.4.9-0squeeze1~bpo50+1vulnerable
Debianpostgresql-8.46.08.4.9-1vulnerable
Debianpostgresql-8.46.08.4.22lts5-0+deb6u1fixed
Susepostgresql94linux enterprise desktop 129.4.5-4.5fixed
Susepostgresql94-libslinux enterprise desktop 129.4.5-4.1fixed
Susepostgresql94-libslinux enterprise software development kit 129.4.5-4.1fixed
Susepostgresql-initlinux enterprise server 129.4-17.8.1fixed
Susepostgresql94linux enterprise server 129.4.5-4.5fixed
Susepostgresql94-libslinux enterprise server 129.4.5-4.1fixed
Susepostgresql-initlinux enterprise server for sap applications 129.4-17.8.1fixed
Susepostgresql94linux enterprise server for sap applications 129.4.5-4.5fixed
Susepostgresql94-libslinux enterprise server for sap applications 129.4.5-4.1fixed
Susepostgresql91-libslinux enterprise software development kit 11 sp39.1.19-0.5.1fixed
Susepostgresql91linux enterprise desktop 11 sp39.1.19-0.5.1fixed
Susepostgresql91manager 2.19.1.19-0.5.1fixed
Susepostgresql91linux enterprise server 11 sp39.1.19-0.5.1fixed
Susepostgresql91linux enterprise server 11 sp3-teradata9.1.19-0.5.1fixed
Susepostgresql91linux enterprise server for sap applications 11 sp39.1.19-0.5.1fixed
Susepostgresql91-libsstudio onsite 1.39.1.19-0.5.1fixed
Susepostgresql94-libslinux enterprise software development kit 11 sp39.4.5-0.8.3fixed
Susepostgresql94-libslinux enterprise software development kit 11 sp49.4.5-0.8.3fixed
Susepostgresql94linux enterprise desktop 11 sp39.4.5-0.8.3fixed
Susepostgresql94-libslinux enterprise desktop 11 sp39.4.5-0.8.3fixed
Susepostgresql94linux enterprise desktop 11 sp49.4.5-0.8.3fixed
Susepostgresql94-libslinux enterprise desktop 11 sp49.4.5-0.8.3fixed
Susepostgresql94manager 2.19.4.5-0.8.3fixed
Susepostgresql94linux enterprise server 11 sp39.4.5-0.8.3fixed
Susepostgresql94-libslinux enterprise server 11 sp39.4.5-0.8.3fixed
Susepostgresql94linux enterprise server 11 sp3-teradata9.4.5-0.8.3fixed
Susepostgresql94-libslinux enterprise server 11 sp3-teradata9.4.5-0.8.3fixed
Susepostgresql94linux enterprise server for sap applications 11 sp39.4.5-0.8.3fixed
Susepostgresql94-libslinux enterprise server for sap applications 11 sp39.4.5-0.8.3fixed
Susepostgresql94linux enterprise server 11 sp49.4.5-0.8.3fixed
Susepostgresql94-libslinux enterprise server 11 sp49.4.5-0.8.3fixed
Susepostgresql94linux enterprise server for sap applications 11 sp49.4.5-0.8.3fixed
Susepostgresql94-libslinux enterprise server for sap applications 11 sp49.4.5-0.8.3fixed
Susepostgresql93linux enterprise desktop 129.3.10-11.1fixed
Susepostgresql93-libslinux enterprise desktop 129.3.10-11.1fixed
Susepostgresql93-libslinux enterprise software development kit 129.3.10-11.1fixed
Susepostgresql93linux enterprise server 129.3.10-11.1fixed
Susepostgresql93-libslinux enterprise server 129.3.10-11.1fixed
Susepostgresql93linux enterprise server for sap applications 129.3.10-11.1fixed
Susepostgresql93-libslinux enterprise server for sap applications 129.3.10-11.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntupostgresql-9.1deb14.049.1.19-0ubuntu0.14.04Not reportedUBUNTU-CVE-2015-5288Not reported
Ubuntupostgresql-9.3deb14.049.3.10-0ubuntu0.14.04Not reportedUBUNTU-CVE-2015-5288Not reported
Ubuntupostgresql-9.3deb14.049.3.10-0ubuntu0.14.04Not reportedUSN-2772-1Not reported
Debianpostgresql-9.1deb79.1.20-0+deb7u1Not reportedDSA-3475-1Not reported
Debianpostgresql-9.4deb89.4.5-0+deb8u1Not reportedDSA-3374-1Not reported
Debianpostgresql-8.4deb6.08.4.22lts5-0+deb6u1Not reportedDLA-329-1Not reported
Susepostgresql94rpmlinux enterprise desktop 129.4.5-4.5Not reportedSUSE-OU-2015:1847-1Not reported
Susepostgresql94-libsrpmlinux enterprise desktop 129.4.5-4.1Not reportedSUSE-OU-2015:1847-1Not reported
Susepostgresql94-libsrpmlinux enterprise software development kit 129.4.5-4.1Not reportedSUSE-OU-2015:1847-1Not reported
Susepostgresql-initrpmlinux enterprise server 129.4-17.8.1Not reportedSUSE-OU-2015:1847-1Not reported
Susepostgresql94rpmlinux enterprise server 129.4.5-4.5Not reportedSUSE-OU-2015:1847-1Not reported
Susepostgresql94-libsrpmlinux enterprise server 129.4.5-4.1Not reportedSUSE-OU-2015:1847-1Not reported
Susepostgresql-initrpmlinux enterprise server for sap applications 129.4-17.8.1Not reportedSUSE-OU-2015:1847-1Not reported
Susepostgresql94rpmlinux enterprise server for sap applications 129.4.5-4.5Not reportedSUSE-OU-2015:1847-1Not reported
Susepostgresql94-libsrpmlinux enterprise server for sap applications 129.4.5-4.1Not reportedSUSE-OU-2015:1847-1Not reported
Susepostgresql91-libsrpmlinux enterprise software development kit 11 sp39.1.19-0.5.1Not reportedSUSE-SU-2016:0389-1Not reported
Susepostgresql91rpmlinux enterprise desktop 11 sp39.1.19-0.5.1Not reportedSUSE-SU-2016:0389-1Not reported
Susepostgresql91rpmmanager 2.19.1.19-0.5.1Not reportedSUSE-SU-2016:0389-1Not reported
Susepostgresql91rpmlinux enterprise server 11 sp39.1.19-0.5.1Not reportedSUSE-SU-2016:0389-1Not reported
Susepostgresql91rpmlinux enterprise server 11 sp3-teradata9.1.19-0.5.1Not reportedSUSE-SU-2016:0389-1Not reported
Susepostgresql91rpmlinux enterprise server for sap applications 11 sp39.1.19-0.5.1Not reportedSUSE-SU-2016:0389-1Not reported
Susepostgresql91-libsrpmstudio onsite 1.39.1.19-0.5.1Not reportedSUSE-SU-2016:0389-1Not reported
Susepostgresql94-libsrpmlinux enterprise software development kit 11 sp39.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94-libsrpmlinux enterprise software development kit 11 sp49.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94rpmlinux enterprise desktop 11 sp39.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94-libsrpmlinux enterprise desktop 11 sp39.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94rpmlinux enterprise desktop 11 sp49.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94-libsrpmlinux enterprise desktop 11 sp49.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94rpmmanager 2.19.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94rpmlinux enterprise server 11 sp39.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94-libsrpmlinux enterprise server 11 sp39.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94rpmlinux enterprise server 11 sp3-teradata9.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94-libsrpmlinux enterprise server 11 sp3-teradata9.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94rpmlinux enterprise server for sap applications 11 sp39.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94-libsrpmlinux enterprise server for sap applications 11 sp39.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94rpmlinux enterprise server 11 sp49.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94-libsrpmlinux enterprise server 11 sp49.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94rpmlinux enterprise server for sap applications 11 sp49.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql94-libsrpmlinux enterprise server for sap applications 11 sp49.4.5-0.8.3Not reportedSUSE-SU-2016:0482-1Not reported
Susepostgresql93rpmlinux enterprise desktop 129.3.10-11.1Not reportedSUSE-SU-2015:1821-1Not reported
Susepostgresql93-libsrpmlinux enterprise desktop 129.3.10-11.1Not reportedSUSE-SU-2015:1821-1Not reported
Susepostgresql93-libsrpmlinux enterprise software development kit 129.3.10-11.1Not reportedSUSE-SU-2015:1821-1Not reported
Susepostgresql93rpmlinux enterprise server 129.3.10-11.1Not reportedSUSE-SU-2015:1821-1Not reported
Susepostgresql93-libsrpmlinux enterprise server 129.3.10-11.1Not reportedSUSE-SU-2015:1821-1Not reported
Susepostgresql93rpmlinux enterprise server for sap applications 129.3.10-11.1Not reportedSUSE-SU-2015:1821-1Not reported
Susepostgresql93-libsrpmlinux enterprise server for sap applications 129.3.10-11.1Not reportedSUSE-SU-2015:1821-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References