CVE-2015-3165: apple mac_os_x_server
Vulnerability summary
CVE-2015-3165 is a medium (CVSS 4.3) vulnerability in apple mac_os_x_server. EPSS estimates a 8.44% chance of exploitation in the next 30 days, higher than 94.9% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 12 · Related 5Timeline
- 28-05-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL session at a time when the authentication timeout will expire during the session shutdown sequence.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
8.44%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
-0.07 pp
From 8.51% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu2 products
- postgresql-9.1< 9.1.16-0ubuntu0.14.04
- postgresql-9.3< 9.3.7-0ubuntu0.14.04
Apple1 product
- mac_os_x_server5.0.2
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 14.10 | 15.04
Debian1 product
- debian_linuxEOL7.0 | 8.0
Postgresql1 product
- postgresqlEOL≤ 9.0.19 | 9.1 | 9.1.1 | 9.1.2 | 9.1.3 | 9.1.4 | 9.1.5 | 9.1.6 | 9.1.7 | 9.1.8 | 9.1.9 | 9.1.10 | 9.1.11 | 9.1.12 | 9.1.13 | 9.1.14 | 9.1.15 | 9.2 | 9.2.1 | 9.2.2 | 9.2.3 | 9.2.4 | 9.2.5 | 9.2.6 | 9.2.7 | 9.2.8 | 9.2.9 | 9.2.10 | 9.3 | 9.3.1 | 9.3.2 | 9.3.3 | 9.3.4 | 9.3.5 | 9.3.6 | 9.4.0 | 9.4.1
5 vendors · 6 products
References
19 linksShow all 19 references
- lists.apple.com/archives/security-announce/2015/Sep/msg00004.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory