VDB
ALPINE-CVE-2017-15098
ALPINE-CVE-2017-15098
PUBLISHED
CVSS 8.100000381469727 HIGH
Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory.
Risk Scores
CVSS 3.0
8.100000381469727
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.18 | postgresql14 | 8.3.7-r2, 8.4.0-r2, 9.0.4-r0 |
| Alpine:v3.15 | postgresql14 | 9.5.2-r0, 0, 10.0-r0 |
| Alpine:v3.11 | postgresql | 10.0-r0, 8.3.7-r2, 9.2.1-r2 |
| Alpine:v3.19 | postgresql15 | 0 |
| Alpine:v3.14 | postgresql | 8.4.3-r0, 8.4.2-r0, 8.4.0-r2 |
| Alpine:v3.5 | postgresql | 9.6.0-r0, 8.3.7-r1, 9.5.2-r3 |
| Alpine:v3.17 | postgresql14 | 8.3.7-r2, 0, 10.0-r0 |
| Alpine:v3.13 | postgresql | 9.2.1-r0, 9.6.5-r1, 9.6.5-r0 |
| Alpine:v3.10 | postgresql | 0, 10.0-r0, 8.4.3-r1 |
| Alpine:v3.20 | postgresql15 | 0 |
| Alpine:v3.18 | postgresql15 | 0 |
| Alpine:v3.8 | postgresql | 9.5.0-r0, 9.6.0-r1, 10.0-r0 |
| Alpine:v3.12 | postgresql | 8.3.5-r0, 9.6.5-r0, 0 |
| Alpine:v3.4 | postgresql | 9.4.0-r0, 9.5.2-r2, 8.4.1-r0 |
| Alpine:v3.16 | postgresql14 | 9.1.1-r0, 8.4.1-r1, 9.1.2-r2 |
| Alpine:v3.9 | postgresql | 9.5.2-r0, 10.0-r1, 0 |
| Alpine:v3.6 | postgresql | 9.6.1-r1, 9.1.2-r1, 9.1.2-r2 |
| Alpine:v3.17 | postgresql15 | 0 |
| Alpine:v3.3 | postgresql | 8.3.5-r0, 9.3.5-r0, 9.4.2-r0 |
| Alpine:v3.7 | postgresql | 9.4.4-r0, 9.3.5-r0, 9.3.3-r0 |
Timeline
- Nov 22, 2017 CVE Published
- May 5, 2026 Distribution Patch
- Jun 15, 2026 CVE Updated