https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T10:48:55.365151+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2015-3167 CVE-2015-3167 2026-10-02T10:48:55.390152+00:00

Affected: PostgreSQL Global Development Group PostgreSQL

contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for attackers to obtain the key via a brute force attack.

 https://vulnerability.circl.lu/vuln/usn-2621-1 USN-2621-1 — postgresql-9.1, postgresql-9.3, postgresql-9.4 vulnerabilities 2026-10-02T10:48:55.390228+00:00

Affected: Ubuntu:14.04:LTS: postgresql-9.3

Benkocs Norbert Attila discovered that PostgreSQL incorrectly handled authentication timeouts. A remote attacker could use this flaw to cause the unauthenticated session to crash, possibly leading to a security issue. (CVE-2015-3165)

Noah Misch discovered that PostgreSQL incorrectly handled certain standard library function return values, possibly leading to security issues. (CVE-2015-3166)

Noah Misch discovered that the pgcrypto function could return different error messages when decrypting using an incorrect key, possibly leading to a security issue. (CVE-2015-3167)