CVE-2016-3065

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.35%

Published

Apr 11, 2016

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server memory information or cause a denial of service (server crash) via a crafted bytea value in a BRIN index page.

Weaknesses (CWE)

CWE-264

Affected Products (2)

postgresql · postgresqlvulnerable

References (8)

http://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commitdiff%3Bh=bf78a6f107949fdfb513d1b45e30cefe04e09e4f

http://www.postgresql.org/about/news/1656/

PatchVendor Advisory

http://www.postgresql.org/docs/current/static/release-9-5-2.html

http://www.securitytracker.com/id/1035468

http://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commitdiff%3Bh=bf78a6f107949fdfb513d1b45e30cefe04e09e4f

http://www.postgresql.org/about/news/1656/

PatchVendor Advisory

http://www.postgresql.org/docs/current/static/release-9-5-2.html

http://www.securitytracker.com/id/1035468

KEV Catalog EPSS Scores Vendors All CVEs