CVE-2016-0766: Critical severity postgresql vulnerability
PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which allows attackers to gain privileges via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0766?
CVE-2016-0766 is considered a medium severity vulnerability as it allows attackers to gain elevated privileges.
How do I fix CVE-2016-0766?
To fix CVE-2016-0766, you should upgrade PostgreSQL to a version above 9.1.20, 9.2.15, 9.3.11, 9.4.6, or 9.5.1.
What versions of PostgreSQL are affected by CVE-2016-0766?
Affected PostgreSQL versions include versions prior to 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1.
Can CVE-2016-0766 be exploited remotely?
Yes, CVE-2016-0766 can potentially be exploited remotely if proper network security measures are not in place.
What type of systems are vulnerable to CVE-2016-0766?
CVE-2016-0766 affects systems running specific versions of PostgreSQL and some Linux distributions like Ubuntu and Debian.