CVE-2016-0768: High severity postgresql common vulnerability
Published Jun 6, 2017
·Updated
PostgreSQL PL/Java after 9.0 does not honor access controls on large objects.
Affected Software
1 affected component
PostgreSQL postgresql<=9.0
Event History
Jun 6, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-0768?
CVE-2016-0768 is classified as a medium severity vulnerability.
2
How do I fix CVE-2016-0768?
To fix CVE-2016-0768, upgrade PostgreSQL to a version later than 9.0 that properly implements access controls for large objects.
3
What versions of PostgreSQL are affected by CVE-2016-0768?
CVE-2016-0768 affects all versions of PostgreSQL PL/Java prior to and including 9.0.
4
What type of vulnerability is CVE-2016-0768?
CVE-2016-0768 is an access control vulnerability related to large objects in PostgreSQL.
5
Can CVE-2016-0768 lead to unauthorized data access?
Yes, CVE-2016-0768 can lead to unauthorized access to large objects in PostgreSQL due to improper enforcement of access controls.