high7.8
CVE-2019-3466
The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which coul…
Impact
The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Postgresql | Postgresql-Common | before 210 |
| Canonical | Ubuntu Linux | Versions 16.04, 18.04, 19.04, 19.10 |
| Debian | Debian Linux | Versions 9.0, 10.0 |