CVE-2015-3167.json

{
    "CVE-ID": "CVE-2015-3167",
    "NVD": {
        "Descriptions": "contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for attackers to obtain the key via a brute force attack.",
        "Cvss2_BaseScore": 5,
        "Cvss3_BaseScore": 7.5,
        "Cvss2_VectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
        "Cvss3_VectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
        "CPEs": [
            {
                "URI": "cpe:/o:debian:debian_linux:9.0",
                "FormattedString": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/o:debian:debian_linux:8.0",
                "FormattedString": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/o:debian:debian_linux:7.0",
                "FormattedString": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/o:canonical:ubuntu_linux:15.04",
                "FormattedString": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/o:canonical:ubuntu_linux:14.10",
                "FormattedString": "cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~",
                "FormattedString": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~",
                "FormattedString": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "9.0.20",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "9.1",
                "VersionEndExcluding": "9.1.16",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "9.2",
                "VersionEndExcluding": "9.2.11",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "9.3",
                "VersionEndExcluding": "9.3.7",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "9.4",
                "VersionEndExcluding": "9.4.2",
                "VersionEndIncluding": ""
            }
        ]
    },
    "Official": {
        "9.0.20": {
            "source": [
                "https://www.postgresql.org/support/security/9.0/",
                "https://www.postgresql.org/docs/release/9.0.20/"
            ]
        },
        "9.1.16": {
            "source": [
                "https://www.postgresql.org/support/security/9.1/",
                "https://www.postgresql.org/docs/release/9.1.16/"
            ]
        },
        "9.2.11": {
            "source": [
                "https://www.postgresql.org/support/security/9.2/",
                "https://www.postgresql.org/docs/release/9.2.11/"
            ]
        },
        "9.3.7": {
            "source": [
                "https://www.postgresql.org/support/security/9.3/",
                "https://www.postgresql.org/docs/release/9.3.7/"
            ]
        },
        "9.4.2": {
            "source": [
                "https://www.postgresql.org/support/security/9.4/",
                "https://www.postgresql.org/docs/release/9.4.2/"
            ]
        }
    }
}