{"schemaVersion":3,"id":"USN-3479-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"postgresql-9.3, postgresql-9.5, postgresql-9.6 vulnerabilities\n\nDavid Rowley discovered that PostgreSQL incorrectly handled memory when\nprocessing certain JSON functions. A remote attacker could possibly use\nthis issue to obtain sensitive information. (CVE-2017-15098)\n\nDean Rasheed discovered that PostgreSQL incorrectly enforced SELECT\nprivileges when processing INSERT ... ON CONFLICT DO UPDATE commands. A\nremote attacker could possibly use this issue to obtain sensitive\ninformation. This issue only affected Ubuntu 16.04 LTS, Ubuntu 17.04 and\nUbuntu 17.10.","dates":{"published":"2017-11-14T12:29:44.000Z","modified":"2026-04-22T09:41:05.741Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"postgresql-9.3","name":"postgresql-9.3","label":"postgresql-9.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-9.3","purlType":"deb","versions":[{"text":"< 9.3.20-0ubuntu0.14.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.20-0ubuntu0.14.04","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-9.5","name":"postgresql-9.5","label":"postgresql-9.5","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-9.5","purlType":"deb","versions":[{"text":"< 9.5.10-0ubuntu0.16.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.10-0ubuntu0.16.04","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-3479-1","label":"ubuntu.com/security/notices/USN-3479-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-15098","label":"ubuntu.com/security/CVE-2017-15098","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2017-15099","label":"ubuntu.com/security/CVE-2017-15099","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2017-15098","CVE-2017-15099"],"downstream":[],"duplicates":[],"related":["CVE-2017-15098","CVE-2017-15099"]},"timeline":[{"kind":"published","date":"2017-11-14T12:29:44.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T09:41:05.741Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T21:10:05.033Z","stale":false,"partial":false}}