CVE-2016-0766 json
PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict a…
published 2016-02-17 10 y ago modified 2026-06-17 4 mo ago also EUVD-2016-0783
- cvss
- 8.8
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 4.1%
- EPSS 4.1% chance of exploitation in 30 days, percentile 90%
- public exploits
- 0
- none known
Summary
PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which allows attackers to gain privileges via unspecified vectors.
Patch / fix
- postgresql postgresql 9.1.20, 9.2.15, 9.3.11, 9.4.6
- postgresql-9.1 Ubuntu 14.04 LTS 9.1.20-0ubuntu0.14.04
- postgresql-9.3 Ubuntu 14.04 LTS 9.3.11-0ubuntu0.14.04
ubuntu advisories UBUNTU-CVE-2016-0766
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- postgresql94 SLES for SAP 11 SP4, SLES 11 SP4, SLED 11 SP4 9.4.6-0.14.3
- postgresql94-libs SLES for SAP 11 SP4, SLES 11 SP4, SLED 11 SP4 +1 more 9.4.6-0.14.3
- postgresql94 SLES for SAP 12 SP1, SLES for SAP 12, SLES 12 SP1 +3 more 9.4.6-7.2
- postgresql94-libs SLES for SAP 12 SP1, SLES for SAP 12, SLES 12 SP1 +5 more 9.4.6-7.1
- postgresql93 SLES for SAP 12, SLES 12, SLED 12 9.3.11-14.2
- postgresql93-libs SLE Software Development Kit 12 9.3.11-14.1
suse advisories SUSE-SU-2016:0677-1SUSE-SU-2016:0555-1SUSE-SU-2016:0539-1
- postgresql94 openSUSE Tumbleweed 9.4.10-1.1
- postgresql93 openSUSE Tumbleweed 9.3.15-1.1
- postgresql95 openSUSE Tumbleweed 9.5.4-1.2
opensuse advisories openSUSE-SU-2024:10030-1openSUSE-SU-2024:10256-1openSUSE-SU-2024:10273-1
Exploit prediction
4.11% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.0 | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-264 Permissions, Privileges, and Access Controls
- Technology feeds
References
-
lists.opensuse.org
/opensuse-security-announce/2016-02/msg00054.html
vendor-advisory, mailing-list, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00016.html
vendor-advisory, mailing-list, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-02/msg00052.html
vendor-advisory, mailing-list, third-party-advisory
-
security.gentoo.org
/glsa/201701-33
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-02/msg00056.html
vendor-advisory, mailing-list, third-party-advisory
-
ubuntu.com
/usn/USN-2894-1
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-02/msg00049.html
vendor-advisory, mailing-list, third-party-advisory
-
debian.org
/security/2016/dsa-3476
vendor-advisory, third-party-advisory
-
debian.org
/security/2016/dsa-3475
vendor-advisory, third-party-advisory
-
postgresql.org
/docs/current/static/release-9-3-11.html
vendor-advisory
-
postgresql.org
/docs/current/static/release-9-2-15.html
vendor-advisory
-
postgresql.org
/docs/current/static/release-9-5-1.html
vendor-advisory
-
postgresql.org
/about/news/1644/
vendor-advisory
-
postgresql.org
/docs/current/static/release-9-4-6.html
vendor-advisory
-
postgresql.org
/docs/current/static/release-9-1-20.html
vendor-advisory
-
securitytracker.com
/id/1035005
vdb-entry, third-party-advisory
-
securityfocus.com
/bid/83184
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2016-0766
- NVD CVE-2016-0766
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.