All vulnerabilities

Servers and applications

CVE-2016-0773

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode character range in a regular expression.

Severity
High 7.5
Published
17 Feb 2016
Last changed
17 Jun 2026
Added to UpHeron
16 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PostgreSQLServers and applications · cpe:a:postgresql:postgresql
  • Version 9.5
  • Version 9.4.5
  • Version 9.4.4
  • Version 9.4.3
All 23 release lines
  • Every version up to 9.1.19
  • Version 9.2
  • Version 9.2.1
  • Version 9.2.2
  • Version 9.2.3
  • Version 9.2.4
  • Version 9.2.5
  • Version 9.2.6
  • Version 9.2.7
  • Version 9.2.8
  • Version 9.2.9
  • Version 9.2.10
  • Version 9.2.11
  • Version 9.2.12
  • Version 9.2.13
  • Version 9.2.14
  • Version 9.4
  • Version 9.4.1
  • Version 9.4.2
  • Version 9.4.3
  • Version 9.4.4
  • Version 9.4.5
  • Version 9.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-0773
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-0773