Unrated severityNVD Advisory· Published Oct 26, 2015· Updated Jun 17, 2026
CVE-2015-5288
CVE-2015-5288
Description
The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause a denial of service (server crash) or read arbitrary server memory via a "too-short" salt.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
93cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*+ 49 more
- cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*range: <=9.0.22
- cpe:2.3:a:postgresql:postgresql:9.1.10:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.11:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.12:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.13:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.14:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.15:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.16:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.17:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.18:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1.9:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.1:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.10:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.11:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.12:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.13:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.7:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.8:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.9:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.4:*:*:*:*:*:*:*
- (no CPE)range: <=9.4.4 (9.0.x before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, 9.4.x before 9.4.5)
- osv-coords43 versionspkg:rpm/opensuse/postgresql93&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/postgresql94&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/postgresql95&distro=openSUSE%20Tumbleweedpkg:rpm/suse/postgresql-init&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/postgresql-init&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/postgresql91&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP3pkg:rpm/suse/postgresql91&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3pkg:rpm/suse/postgresql91&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATApkg:rpm/suse/postgresql91&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP3pkg:rpm/suse/postgresql91&distro=SUSE%20Manager%202.1pkg:rpm/suse/postgresql91-libs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3pkg:rpm/suse/postgresql91-libs&distro=SUSE%20Studio%20Onsite%201.3pkg:rpm/suse/postgresql93&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/postgresql93&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/postgresql93&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/postgresql93-libs&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/postgresql93-libs&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/postgresql93-libs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/postgresql93-libs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP3pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATApkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP3pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/postgresql94&distro=SUSE%20Manager%202.1pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP3pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATApkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP3pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012
< 9.3.15-1.1+ 42 more
- (no CPE)range: < 9.3.15-1.1
- (no CPE)range: < 9.4.10-1.1
- (no CPE)range: < 9.5.4-1.2
- (no CPE)range: < 9.4-17.8.1
- (no CPE)range: < 9.4-17.8.1
- (no CPE)range: < 9.1.19-0.5.1
- (no CPE)range: < 9.1.19-0.5.1
- (no CPE)range: < 9.1.19-0.5.1
- (no CPE)range: < 9.1.19-0.5.1
- (no CPE)range: < 9.1.19-0.5.1
- (no CPE)range: < 9.1.19-0.5.1
- (no CPE)range: < 9.1.19-0.5.1
- (no CPE)range: < 9.3.10-11.1
- (no CPE)range: < 9.3.10-11.1
- (no CPE)range: < 9.3.10-11.1
- (no CPE)range: < 9.3.10-11.1
- (no CPE)range: < 9.3.10-11.1
- (no CPE)range: < 9.3.10-11.1
- (no CPE)range: < 9.3.10-11.1
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-4.5
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-4.5
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-4.5
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-4.1
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-4.1
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-4.1
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-0.8.3
- (no CPE)range: < 9.4.5-4.1
Patches
Vulnerability mechanics
References
18- www.postgresql.org/about/news/1615/nvdVendor Advisory
- www.postgresql.org/docs/9.0/static/release-9-0-23.htmlnvdVendor Advisory
- www.postgresql.org/docs/9.1/static/release-9-1-19.htmlnvdVendor Advisory
- www.postgresql.org/docs/9.2/static/release-9-2-14.htmlnvdVendor Advisory
- www.postgresql.org/docs/9.3/static/release-9-3-10.htmlnvdVendor Advisory
- www.postgresql.org/docs/9.4/static/release-9-4-5.htmlnvdVendor Advisory
- lists.fedoraproject.org/pipermail/package-announce/2015-November/172316.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2015-October/169094.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.htmlnvd
- lists.opensuse.org/opensuse-updates/2015-11/msg00033.htmlnvd
- lists.opensuse.org/opensuse-updates/2015-11/msg00040.htmlnvd
- www.debian.org/security/2015/dsa-3374nvd
- www.debian.org/security/2016/dsa-3475nvd
- www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlnvd
- www.securityfocus.com/bid/77049nvd
- www.securitytracker.com/id/1033775nvd
- www.ubuntu.com/usn/USN-2772-1nvd
- security.gentoo.org/glsa/201701-33nvd
News mentions
0No linked articles in our index yet.