Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-3466

The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local pri

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
debian

Description

The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a postgresql-common (Debian-specific Postgres management tools)

  • Versions before 210affected

References