suse · CVE-2016-0766

Quick triage

Priority: medium Published: 2021-05-30 13:37:14 UTC Updated: 2025-03-25 01:17:21 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-0766 severity moderate: SUSE including 95 source package names (libecpg6-10.10-1.15.1, libecpg6-10.5-1.3.1, …), 200 product×package rows across 35 product lines (SUSE Linux Enterprise Desktop 11 SP4, SUSE Linux Enterprise Desktop 12, … (35 product lines)): Fixed 190, Known Not Affected 10.

Description:

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which allows attackers to gain privileges via unspecified vectors.

cvelogic Threat Intelligence