View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2015-3166 medium priority: Ubuntu including 4 source packages (postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4), 36 status rows across 9 suites (precise, trusty, upstream, utopic, vivid, wily, xenial, yakkety, zesty): DNE 25, released 9, ignored 1, needs-triage 1.
The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, as demonstrated by an out-of-memory error.