CVE-2016-3065

CVE-2016-3065 describes a critical vulnerability in the pageinspect extension of PostgreSQL versions prior to 9.5.2. Attackers can exploit this flaw by providing a specially crafted bytea value to the brin_page_type or brin_metapage_info functions, bypassing access controls. This allows for the disclosure of sensitive server memory information or a denial of service through a server crash. With a CVSS score of 9.1 (CRITICAL), this vulnerability is easily exploitable over the network with low complexity and no user interaction, leading to high confidentiality and availability impacts. While there is no known active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.