CVE-2015-3167

pgcrypto has multiple error messages for decryption with an incorrect key.

Version Information

Affected Version Fixed In Fix Published
9.4 9.4.2 2015-05-22
9.3 9.3.7 2015-05-22
9.2 9.2.11 2015-05-22
9.1 9.1.16 2015-05-22
9.0 9.0.20 2015-05-22

For more information about PostgreSQL versioning, please visit the versioning page.

CVSS 3.0

Overall Score 3.7
Component contrib module
Vector AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Reporting Security Vulnerabilities

If you wish to report a new security vulnerability in PostgreSQL, please send an email to security@postgresql.org.

For reporting non-security bugs, please see the Report a Bug page.