Wind River Support Network

HomeDefectsLIN10-2625

Fixed

LIN10-2625 : Security Advisory - postgresql - CVE-2017-15098

Created: Nov 30, 2017 Updated: Dec 3, 2018

Resolved Date: Feb 6, 2018

Previous ID: LIN9-5916

Found In Version: 10.17.41.1

Fix Version: 10.17.41.4

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory.

https://nvd.nist.gov/vuln/detail/CVE-2017-15098

Other Downloads

CVEs

CVE-2017-15098