CVE-2016-0766

—

CVSS 3.1

8.8 high

EPSS

4%p90

Published

Feb 17, 2016 (Feb 17, 2016)

Modified

Jun 17, 2026

Description

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which allows attackers to gain privileges via unspecified vectors.

Vendors: postgresql canonical debian
Products: postgresql, ubuntu linux, debian linux
Weakness: CWE-264
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.1%)

In the news0 stories

No ingested article mentions this CVE yet.