Product

debian/postgresql-common vulnerabilities

8 published CVES affecting debian/postgresql-common, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 8
Critical: 0
High: 2
Medium: 1
Low: 0
Unscored: 5
CISA KEV: 0

Latest debian/postgresql-common CVEs

Newest publication first

CVE-2019-3466 The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation.
Published 2019-11-20

HighCVSS 7.8

The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation.
DLA-1994-1 postgresql-common - security update
Published 2019-11-15

Unknown
DSA-4568-1 postgresql-common - security update
Published 2019-11-14

Unknown
CVE-2016-1255 The pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie before 165+deb8u2, in Debian unstable before 178, in Ubuntu 12.04 LTS before 129ubuntu1.2, in...
Published 2017-12-05

HighCVSS 7.8

The pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie before 165+deb8u2, in Debian unstable before 178, in Ubuntu 12.04 LTS before 129ubuntu1.2, in Ubuntu 14.04 LTS before 154ubuntu1.1, in Ubuntu 16.04 LTS before 173ubuntu0.1,...
CVE-2017-8806 The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181+deb9u1 for PostgreSQL (and other packages related to Debian...
Published 2017-11-13

MediumCVSS 5.5

The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181+deb9u1 for PostgreSQL (and other packages related to Debian and Ubuntu), handled symbolic links insecurely, which could result in local den...
DLA-1169-1 postgresql-common - security update
Published 2017-11-11

Unknown
DSA-4029-1 postgresql-common - security update
Published 2017-11-09

Unknown
DLA-774-1 postgresql-common - security update
Published 2017-01-01

Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.