Description

The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause a denial of service (server crash) or read arbitrary server memory via a "too-short" salt.

Remediation

References

CVE-2015-5288

Related Vulnerabilities

WordPress Plugin SyntaxHighlighter Evolved Cross-Site Scripting (3.1.5)

Joomla! Core Cross-Site Scripting (2.5.0 - 3.9.24)

WordPress Plugin Controlled Admin Access Security Bypass (1.4.0)

WordPress Plugin Nextend Facebook Connect Cross-Site Scripting (1.5.0)

MySQL CVE-2023-22112 Vulnerability (CVE-2023-22112)

Severity

Medium

Classification

CVE-2015-5288 CWE-200

Tags

Missing Update Known Vulnerabilities