CVE-2016-3065: PostgreSQL

Critical severity, CVSS 9.1. EPSS: 4.1% chance of exploitation in the next 30 days.

The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server memory information or cause a denial of service (server crash) via a crafted bytea value in a BRIN index page.

Affected products

• PostgreSQL PostgreSQL: version 9.5 only; version 9.5.1 only

Published 2016-04-11. Last modified 2026-06-17.