CVE-2015-0241 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-0241 Interim 1 24 2023-12-08T02:19:27Z current 2021-05-30T13:25:49Z 2023-12-08T02:19:27Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-0241 The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a (1) large number of digits when processing a numeric formatting template, which triggers a buffer over-read, or (2) crafted timestamp formatting template, which triggers a buffer overflow. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2015-March/001280.html E-Mail link for SUSE-SU-2015:0478-1 https://lists.suse.com/pipermail/sle-security-updates/2015-March/001321.html E-Mail link for SUSE-SU-2015:0639-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 7 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Manager 2.1 openSUSE Tumbleweed libecpg6-9.1.15-0.3.1 libecpg6-9.3.6-5.1 libpq5-32bit-9.1.15-0.3.1 libpq5-32bit-9.3.6-5.1 libpq5-9.1.15-0.3.1 libpq5-9.3.6-5.1 postgresql-9.2.10-2.el7_1 postgresql-contrib-9.2.10-2.el7_1 postgresql-devel-9.2.10-2.el7_1 postgresql-docs-9.2.10-2.el7_1 postgresql-libs-9.2.10-2.el7_1 postgresql-plperl-9.2.10-2.el7_1 postgresql-plpython-9.2.10-2.el7_1 postgresql-pltcl-9.2.10-2.el7_1 postgresql-server-9.2.10-2.el7_1 postgresql-test-9.2.10-2.el7_1 postgresql-upgrade-9.2.10-2.el7_1 postgresql91-9.1.15-0.3.1 postgresql91-contrib-9.1.15-0.3.1 postgresql91-devel-9.1.15-0.3.1 postgresql91-docs-9.1.15-0.3.1 postgresql91-pltcl-9.1.15-0.3.1 postgresql91-server-9.1.15-0.3.1 postgresql93-9.3.15-1.1 postgresql93-9.3.6-5.2 postgresql93-contrib-9.3.15-1.1 postgresql93-contrib-9.3.6-5.2 postgresql93-devel-9.3.15-1.1 postgresql93-devel-9.3.6-5.1 postgresql93-docs-9.3.15-1.1 postgresql93-docs-9.3.6-5.2 postgresql93-plperl-9.3.15-1.1 postgresql93-plpython-9.3.15-1.1 postgresql93-pltcl-9.3.15-1.1 postgresql93-server-9.3.15-1.1 postgresql93-server-9.3.6-5.2 postgresql93-test-9.3.15-1.1 postgresql-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-contrib-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-devel-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-docs-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-libs-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-plperl-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-plpython-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-pltcl-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-server-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-test-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 postgresql-upgrade-9.2.10-2.el7_1 as a component of SUSE Liberty Linux 7 libecpg6-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 libpq5-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 libpq5-32bit-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 postgresql91-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 postgresql91-docs-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 libecpg6-9.3.6-5.1 as a component of SUSE Linux Enterprise Desktop 12 libpq5-9.3.6-5.1 as a component of SUSE Linux Enterprise Desktop 12 libpq5-32bit-9.3.6-5.1 as a component of SUSE Linux Enterprise Desktop 12 postgresql93-9.3.6-5.2 as a component of SUSE Linux Enterprise Desktop 12 libecpg6-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libpq5-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libpq5-32bit-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql91-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql91-contrib-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql91-docs-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql91-server-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libecpg6-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 libpq5-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 libpq5-32bit-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-contrib-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-docs-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 postgresql91-server-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3 libecpg6-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libpq5-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libpq5-32bit-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA postgresql91-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA postgresql91-contrib-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA postgresql91-docs-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA postgresql91-server-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libecpg6-9.3.6-5.1 as a component of SUSE Linux Enterprise Server 12 libpq5-9.3.6-5.1 as a component of SUSE Linux Enterprise Server 12 libpq5-32bit-9.3.6-5.1 as a component of SUSE Linux Enterprise Server 12 postgresql93-9.3.6-5.2 as a component of SUSE Linux Enterprise Server 12 postgresql93-contrib-9.3.6-5.2 as a component of SUSE Linux Enterprise Server 12 postgresql93-docs-9.3.6-5.2 as a component of SUSE Linux Enterprise Server 12 postgresql93-server-9.3.6-5.2 as a component of SUSE Linux Enterprise Server 12 libecpg6-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 libpq5-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 libpq5-32bit-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 postgresql91-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 postgresql91-contrib-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 postgresql91-docs-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 postgresql91-server-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 libecpg6-9.3.6-5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libpq5-9.3.6-5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libpq5-32bit-9.3.6-5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 postgresql93-9.3.6-5.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 postgresql93-contrib-9.3.6-5.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 postgresql93-docs-9.3.6-5.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 postgresql93-server-9.3.6-5.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 postgresql91-devel-9.1.15-0.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 postgresql93-devel-9.3.6-5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 postgresql91-pltcl-9.1.15-0.3.1 as a component of SUSE Manager 2.1 postgresql93-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-contrib-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-devel-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-docs-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-plperl-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-plpython-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-pltcl-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-server-9.3.15-1.1 as a component of openSUSE Tumbleweed postgresql93-test-9.3.15-1.1 as a component of openSUSE Tumbleweed The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a (1) large number of digits when processing a numeric formatting template, which triggers a buffer over-read, or (2) crafted timestamp formatting template, which triggers a buffer overflow. CVE-2015-0241 SUSE Liberty Linux 7:postgresql-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-contrib-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-devel-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-docs-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-libs-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-plperl-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-plpython-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-pltcl-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-server-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-test-9.2.10-2.el7_1 SUSE Liberty Linux 7:postgresql-upgrade-9.2.10-2.el7_1 SUSE Linux Enterprise Desktop 11 SP3:libecpg6-9.1.15-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:libpq5-9.1.15-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:libpq5-32bit-9.1.15-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:postgresql91-9.1.15-0.3.1 SUSE Linux Enterprise Desktop 11 SP3:postgresql91-docs-9.1.15-0.3.1 SUSE Linux Enterprise Desktop 12:libecpg6-9.3.6-5.1 SUSE Linux Enterprise Desktop 12:libpq5-9.3.6-5.1 SUSE Linux Enterprise Desktop 12:libpq5-32bit-9.3.6-5.1 SUSE Linux Enterprise Desktop 12:postgresql93-9.3.6-5.2 SUSE Linux Enterprise Server 11 SP1-TERADATA:libecpg6-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libpq5-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libpq5-32bit-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql91-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql91-contrib-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql91-docs-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql91-server-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3:libecpg6-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3:libpq5-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3:libpq5-32bit-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-contrib-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-docs-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3:postgresql91-server-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libecpg6-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libpq5-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libpq5-32bit-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:postgresql91-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:postgresql91-contrib-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:postgresql91-docs-9.1.15-0.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:postgresql91-server-9.1.15-0.3.1 SUSE Linux Enterprise Server 12:libecpg6-9.3.6-5.1 SUSE Linux Enterprise Server 12:libpq5-9.3.6-5.1 SUSE Linux Enterprise Server 12:libpq5-32bit-9.3.6-5.1 SUSE Linux Enterprise Server 12:postgresql93-9.3.6-5.2 SUSE Linux Enterprise Server 12:postgresql93-contrib-9.3.6-5.2 SUSE Linux Enterprise Server 12:postgresql93-docs-9.3.6-5.2 SUSE Linux Enterprise Server 12:postgresql93-server-9.3.6-5.2 SUSE Linux Enterprise Server for SAP Applications 11 SP3:libecpg6-9.1.15-0.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:libpq5-9.1.15-0.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:libpq5-32bit-9.1.15-0.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:postgresql91-9.1.15-0.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:postgresql91-contrib-9.1.15-0.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:postgresql91-docs-9.1.15-0.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:postgresql91-server-9.1.15-0.3.1 SUSE Linux Enterprise Server for SAP Applications 12:libecpg6-9.3.6-5.1 SUSE Linux Enterprise Server for SAP Applications 12:libpq5-9.3.6-5.1 SUSE Linux Enterprise Server for SAP Applications 12:libpq5-32bit-9.3.6-5.1 SUSE Linux Enterprise Server for SAP Applications 12:postgresql93-9.3.6-5.2 SUSE Linux Enterprise Server for SAP Applications 12:postgresql93-contrib-9.3.6-5.2 SUSE Linux Enterprise Server for SAP Applications 12:postgresql93-docs-9.3.6-5.2 SUSE Linux Enterprise Server for SAP Applications 12:postgresql93-server-9.3.6-5.2 SUSE Linux Enterprise Software Development Kit 11 SP3:postgresql91-devel-9.1.15-0.3.1 SUSE Linux Enterprise Software Development Kit 12:postgresql93-devel-9.3.6-5.1 SUSE Manager 2.1:postgresql91-pltcl-9.1.15-0.3.1 openSUSE Tumbleweed:postgresql93-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-contrib-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-devel-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-docs-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-plperl-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-plpython-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-pltcl-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-server-9.3.15-1.1 openSUSE Tumbleweed:postgresql93-test-9.3.15-1.1 moderate 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H