Wind River Support Network

HomeDefectsLIN10-2625
Fixed

LIN10-2625 : Security Advisory - postgresql - CVE-2017-15098

Created: Nov 30, 2017    Updated: Dec 3, 2018
Resolved Date: Feb 6, 2018
Previous ID: LIN9-5916
Found In Version: 10.17.41.1
Fix Version: 10.17.41.4
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory.

https://nvd.nist.gov/vuln/detail/CVE-2017-15098

Other Downloads


CVEs


Live chat
Online