CVE-2016-5423 in PostgreSQL

सारांश

द्वारा VulDB • 10/06/2026

PostgreSQL versions before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), obtain sensitive memory information, or possibly execute arbitrary code via (1) a CASE expression within the test value subexpression of another CASE or (2) inlining of an SQL function that implements the equality operator used for a CASE expression involving values of different types.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• आरक्षित करना: 10/06/2016
• प्रकटीकरण: 09/12/2016
• संयम: स्वीकृत
• प्रविष्टि: VDB-90732
• CPE: तैयार
• CWE: CWE-476 (पुष्टि की गई)
• CVSS: 8.3 (NVD)
• EPSS: 0.05962
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Hospital, Industry, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-5423
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-5423
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-5423/