CVE-2016-3065
CriticalSummary
The brin_page_type and brin_metapage_info functions in the pageinspect extension in PostgreSQL before version 9.5.2 allow attackers to bypass intended access restrictions. Consequently, they can obtain sensitive server memory information or cause a denial of service (server crash) via a crafted bytea value in a BRIN index page.
Risk Assessment
The organization may be exposed to sensitive data leakage and attacks leading to server crashes, resulting in service downtime.
Recommendation
It is recommended to upgrade PostgreSQL to version 9.5.2 or later to mitigate this vulnerability and implement additional security measures to protect against unauthorized access.
Original NVD description (English source)
The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server memory information or cause a denial of service (server crash) via a crafted bytea value in a BRIN index page.