https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 23:06:19 +0000 https://vulnerability.circl.lu/vuln/cve-2015-3167 <p><strong>Affected:</strong> PostgreSQL Global Development Group PostgreSQL</p> <p>contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for attackers to obtain the key via a brute force attack.</p> <p><strong>Affected:</strong> PostgreSQL Global Development Group PostgreSQL</p> <p>contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for attackers to obtain the key via a brute force attack.</p> https://vulnerability.circl.lu/vuln/cve-2015-3167 https://vulnerability.circl.lu/vuln/usn-2621-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: postgresql-9.3</p> <p>Benkocs Norbert Attila discovered that PostgreSQL incorrectly handled authentication timeouts. A remote attacker could use this flaw to cause the unauthenticated session to crash, possibly leading to a security issue. (CVE-2015-3165)</p> <p>Noah Misch discovered that PostgreSQL incorrectly handled certain standard library function return values, possibly leading to security issues. (CVE-2015-3166)</p> <p>Noah Misch discovered that the pgcrypto function could return different error messages when decrypting using an incorrect key, possibly leading to a security issue. (CVE-2015-3167)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: postgresql-9.3</p> <p>Benkocs Norbert Attila discovered that PostgreSQL incorrectly handled authentication timeouts. A remote attacker could use this flaw to cause the unauthenticated session to crash, possibly leading to a security issue. (CVE-2015-3165)</p> <p>Noah Misch discovered that PostgreSQL incorrectly handled certain standard library function return values, possibly leading to security issues. (CVE-2015-3166)</p> <p>Noah Misch discovered that the pgcrypto function could return different error messages when decrypting using an incorrect key, possibly leading to a security issue. (CVE-2015-3167)</p> https://vulnerability.circl.lu/vuln/usn-2621-1