Lucene search
DebianCVE-2016-1255HistoryDec 05, 2017 - 4:29 p.m.
CVE-2016-1255
2017-12-0516:29:00
CWE-59
debian
web.nvd.nist.gov
179
cve-2016-1255
pg_ctlcluster
root privileges
symlink attack
debian
ubuntu
postgresql
nvd
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
5.8
Confidence
High
EPSS
0
Percentile
5.1%
The pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie before 165+deb8u2, in Debian unstable before 178, in Ubuntu 12.04 LTS before 129ubuntu1.2, in Ubuntu 14.04 LTS before 154ubuntu1.1, in Ubuntu 16.04 LTS before 173ubuntu0.1, in Ubuntu 17.04 before 179ubuntu0.1, and in Ubuntu 17.10 before 184ubuntu1.1 allows local users to gain root privileges via a symlink attack on a logfile in /var/log/postgresql.
Affected configurations
Node
debianpostgresql-commonMatch1
ORdebianpostgresql-commonMatch2
ORdebianpostgresql-commonMatch3
ORdebianpostgresql-commonMatch4
ORdebianpostgresql-commonMatch5
ORdebianpostgresql-commonMatch6
ORdebianpostgresql-commonMatch7
ORdebianpostgresql-commonMatch8
ORdebianpostgresql-commonMatch9
ORdebianpostgresql-commonMatch10
ORdebianpostgresql-commonMatch11
ORdebianpostgresql-commonMatch12
ORdebianpostgresql-commonMatch13
ORdebianpostgresql-commonMatch14
ORdebianpostgresql-commonMatch15
ORdebianpostgresql-commonMatch16
ORdebianpostgresql-commonMatch17
ORdebianpostgresql-commonMatch18
ORdebianpostgresql-commonMatch19
ORdebianpostgresql-commonMatch20
ORdebianpostgresql-commonMatch21
ORdebianpostgresql-commonMatch22
ORdebianpostgresql-commonMatch23
ORdebianpostgresql-commonMatch24
ORdebianpostgresql-commonMatch25
ORdebianpostgresql-commonMatch26
ORdebianpostgresql-commonMatch27
ORdebianpostgresql-commonMatch28
ORdebianpostgresql-commonMatch29
ORdebianpostgresql-commonMatch30
ORdebianpostgresql-commonMatch31
ORdebianpostgresql-commonMatch32
ORdebianpostgresql-commonMatch33
ORdebianpostgresql-commonMatch34
ORdebianpostgresql-commonMatch35
ORdebianpostgresql-commonMatch36
ORdebianpostgresql-commonMatch37
ORdebianpostgresql-commonMatch38
ORdebianpostgresql-commonMatch39
ORdebianpostgresql-commonMatch40
ORdebianpostgresql-commonMatch41
ORdebianpostgresql-commonMatch42
ORdebianpostgresql-commonMatch43
ORdebianpostgresql-commonMatch44
ORdebianpostgresql-commonMatch45
ORdebianpostgresql-commonMatch46
ORdebianpostgresql-commonMatch47
ORdebianpostgresql-commonMatch48
ORdebianpostgresql-commonMatch49
ORdebianpostgresql-commonMatch50
ORdebianpostgresql-commonMatch51
ORdebianpostgresql-commonMatch52
ORdebianpostgresql-commonMatch53
ORdebianpostgresql-commonMatch54
ORdebianpostgresql-commonMatch55
ORdebianpostgresql-commonMatch56
ORdebianpostgresql-commonMatch57
ORdebianpostgresql-commonMatch58
ORdebianpostgresql-commonMatch59
ORdebianpostgresql-commonMatch60
ORdebianpostgresql-commonMatch61
ORdebianpostgresql-commonMatch62
ORdebianpostgresql-commonMatch63
ORdebianpostgresql-commonMatch64
ORdebianpostgresql-commonMatch65
ORdebianpostgresql-commonMatch66
ORdebianpostgresql-commonMatch67
ORdebianpostgresql-commonMatch68
ORdebianpostgresql-commonMatch69
ORdebianpostgresql-commonMatch70
ORdebianpostgresql-commonMatch71
ORdebianpostgresql-commonMatch72
ORdebianpostgresql-commonMatch73
ORdebianpostgresql-commonMatch74
ORdebianpostgresql-commonMatch75
ORdebianpostgresql-commonMatch76
ORdebianpostgresql-commonMatch77
ORdebianpostgresql-commonMatch78
ORdebianpostgresql-commonMatch79
ORdebianpostgresql-commonMatch80
ORdebianpostgresql-commonMatch81
ORdebianpostgresql-commonMatch82
ORdebianpostgresql-commonMatch83
ORdebianpostgresql-commonMatch84
ORdebianpostgresql-commonMatch85
ORdebianpostgresql-commonMatch86
ORdebianpostgresql-commonMatch87
ORdebianpostgresql-commonMatch88
ORdebianpostgresql-commonMatch89
ORdebianpostgresql-commonMatch90
ORdebianpostgresql-commonMatch91
ORdebianpostgresql-commonMatch92
ORdebianpostgresql-commonMatch93
ORdebianpostgresql-commonMatch94
ORdebianpostgresql-commonMatch95
ORdebianpostgresql-commonMatch96
ORdebianpostgresql-commonMatch97
ORdebianpostgresql-commonMatch98
ORdebianpostgresql-commonMatch99
ORdebianpostgresql-commonMatch100
ORdebianpostgresql-commonMatch101
ORdebianpostgresql-commonMatch102
ORdebianpostgresql-commonMatch103
ORdebianpostgresql-commonMatch104
ORdebianpostgresql-commonMatch105
ORdebianpostgresql-commonMatch106
ORdebianpostgresql-commonMatch107
ORdebianpostgresql-commonMatch108
ORdebianpostgresql-commonMatch109
ORdebianpostgresql-commonMatch110
ORdebianpostgresql-commonMatch111
ORdebianpostgresql-commonMatch112
ORdebianpostgresql-commonMatch113
ORdebianpostgresql-commonMatch114
ORdebianpostgresql-commonMatch115
ORdebianpostgresql-commonMatch116
ORdebianpostgresql-commonMatch117
ORdebianpostgresql-commonMatch118
ORdebianpostgresql-commonMatch119
ORdebianpostgresql-commonMatch120
ORdebianpostgresql-commonMatch121
ORdebianpostgresql-commonMatch122
ORdebianpostgresql-commonMatch123
ORdebianpostgresql-commonMatch124
ORdebianpostgresql-commonMatch125
ORdebianpostgresql-commonMatch126
ORdebianpostgresql-commonMatch127
ORdebianpostgresql-commonMatch128
ORdebianpostgresql-commonMatch129
ORdebianpostgresql-commonMatch130
ORdebianpostgresql-commonMatch131
ORdebianpostgresql-commonMatch132
ORdebianpostgresql-commonMatch133
debiandebian_linuxMatch7.0
Node
debianpostgresql-commonMatch1
ORdebianpostgresql-commonMatch2
ORdebianpostgresql-commonMatch3
ORdebianpostgresql-commonMatch4
ORdebianpostgresql-commonMatch5
ORdebianpostgresql-commonMatch6
ORdebianpostgresql-commonMatch7
ORdebianpostgresql-commonMatch8
ORdebianpostgresql-commonMatch9
ORdebianpostgresql-commonMatch10
ORdebianpostgresql-commonMatch11
ORdebianpostgresql-commonMatch12
ORdebianpostgresql-commonMatch13
ORdebianpostgresql-commonMatch14
ORdebianpostgresql-commonMatch15
ORdebianpostgresql-commonMatch16
ORdebianpostgresql-commonMatch17
ORdebianpostgresql-commonMatch18
ORdebianpostgresql-commonMatch19
ORdebianpostgresql-commonMatch20
ORdebianpostgresql-commonMatch21
ORdebianpostgresql-commonMatch22
ORdebianpostgresql-commonMatch23
ORdebianpostgresql-commonMatch24
ORdebianpostgresql-commonMatch25
ORdebianpostgresql-commonMatch26
ORdebianpostgresql-commonMatch27
ORdebianpostgresql-commonMatch28
ORdebianpostgresql-commonMatch29
ORdebianpostgresql-commonMatch30
ORdebianpostgresql-commonMatch31
ORdebianpostgresql-commonMatch32
ORdebianpostgresql-commonMatch33
ORdebianpostgresql-commonMatch34
ORdebianpostgresql-commonMatch35
ORdebianpostgresql-commonMatch36
ORdebianpostgresql-commonMatch37
ORdebianpostgresql-commonMatch38
ORdebianpostgresql-commonMatch39
ORdebianpostgresql-commonMatch40
ORdebianpostgresql-commonMatch41
ORdebianpostgresql-commonMatch42
ORdebianpostgresql-commonMatch43
ORdebianpostgresql-commonMatch44
ORdebianpostgresql-commonMatch45
ORdebianpostgresql-commonMatch46
ORdebianpostgresql-commonMatch47
ORdebianpostgresql-commonMatch48
ORdebianpostgresql-commonMatch49
ORdebianpostgresql-commonMatch50
ORdebianpostgresql-commonMatch51
ORdebianpostgresql-commonMatch52
ORdebianpostgresql-commonMatch53
ORdebianpostgresql-commonMatch54
ORdebianpostgresql-commonMatch55
ORdebianpostgresql-commonMatch56
ORdebianpostgresql-commonMatch57
ORdebianpostgresql-commonMatch58
ORdebianpostgresql-commonMatch59
ORdebianpostgresql-commonMatch60
ORdebianpostgresql-commonMatch61
ORdebianpostgresql-commonMatch62
ORdebianpostgresql-commonMatch63
ORdebianpostgresql-commonMatch64
ORdebianpostgresql-commonMatch65
ORdebianpostgresql-commonMatch66
ORdebianpostgresql-commonMatch67
ORdebianpostgresql-commonMatch68
ORdebianpostgresql-commonMatch69
ORdebianpostgresql-commonMatch70
ORdebianpostgresql-commonMatch71
ORdebianpostgresql-commonMatch72
ORdebianpostgresql-commonMatch73
ORdebianpostgresql-commonMatch74
ORdebianpostgresql-commonMatch75
ORdebianpostgresql-commonMatch76
ORdebianpostgresql-commonMatch77
ORdebianpostgresql-commonMatch78
ORdebianpostgresql-commonMatch79
ORdebianpostgresql-commonMatch80
ORdebianpostgresql-commonMatch81
ORdebianpostgresql-commonMatch82
ORdebianpostgresql-commonMatch83
ORdebianpostgresql-commonMatch84
ORdebianpostgresql-commonMatch85
ORdebianpostgresql-commonMatch86
ORdebianpostgresql-commonMatch87
ORdebianpostgresql-commonMatch88
ORdebianpostgresql-commonMatch89
ORdebianpostgresql-commonMatch90
ORdebianpostgresql-commonMatch91
ORdebianpostgresql-commonMatch92
ORdebianpostgresql-commonMatch93
ORdebianpostgresql-commonMatch94
ORdebianpostgresql-commonMatch95
ORdebianpostgresql-commonMatch96
ORdebianpostgresql-commonMatch97
ORdebianpostgresql-commonMatch98
ORdebianpostgresql-commonMatch99
ORdebianpostgresql-commonMatch100
ORdebianpostgresql-commonMatch101
ORdebianpostgresql-commonMatch102
ORdebianpostgresql-commonMatch103
ORdebianpostgresql-commonMatch104
ORdebianpostgresql-commonMatch105
ORdebianpostgresql-commonMatch106
ORdebianpostgresql-commonMatch107
ORdebianpostgresql-commonMatch108
ORdebianpostgresql-commonMatch109
ORdebianpostgresql-commonMatch110
ORdebianpostgresql-commonMatch111
ORdebianpostgresql-commonMatch112
ORdebianpostgresql-commonMatch113
ORdebianpostgresql-commonMatch114
ORdebianpostgresql-commonMatch115
ORdebianpostgresql-commonMatch116
ORdebianpostgresql-commonMatch117
ORdebianpostgresql-commonMatch118
ORdebianpostgresql-commonMatch119
ORdebianpostgresql-commonMatch120
ORdebianpostgresql-commonMatch121
ORdebianpostgresql-commonMatch122
ORdebianpostgresql-commonMatch123
ORdebianpostgresql-commonMatch124
ORdebianpostgresql-commonMatch125
ORdebianpostgresql-commonMatch126
ORdebianpostgresql-commonMatch127
ORdebianpostgresql-commonMatch128
ORdebianpostgresql-commonMatch129
ORdebianpostgresql-commonMatch130
ORdebianpostgresql-commonMatch131
ORdebianpostgresql-commonMatch132
ORdebianpostgresql-commonMatch133
ORdebianpostgresql-commonMatch134
ORdebianpostgresql-commonMatch135
ORdebianpostgresql-commonMatch136
ORdebianpostgresql-commonMatch137
ORdebianpostgresql-commonMatch138
ORdebianpostgresql-commonMatch139
ORdebianpostgresql-commonMatch140
ORdebianpostgresql-commonMatch141
ORdebianpostgresql-commonMatch142
ORdebianpostgresql-commonMatch143
ORdebianpostgresql-commonMatch144
ORdebianpostgresql-commonMatch145
ORdebianpostgresql-commonMatch146
ORdebianpostgresql-commonMatch147
ORdebianpostgresql-commonMatch148
ORdebianpostgresql-commonMatch149
ORdebianpostgresql-commonMatch150
ORdebianpostgresql-commonMatch151
ORdebianpostgresql-commonMatch152
ORdebianpostgresql-commonMatch153
ORdebianpostgresql-commonMatch154
ORdebianpostgresql-commonMatch155
ORdebianpostgresql-commonMatch156
ORdebianpostgresql-commonMatch157
ORdebianpostgresql-commonMatch158
ORdebianpostgresql-commonMatch159
ORdebianpostgresql-commonMatch160
ORdebianpostgresql-commonMatch161
ORdebianpostgresql-commonMatch162
ORdebianpostgresql-commonMatch163
ORdebianpostgresql-commonMatch164
debiandebian_linuxMatch8.0
Node
debianpostgresql-commonMatch122
ORdebianpostgresql-commonMatch122ubuntu1
ORdebianpostgresql-commonMatch124
ORdebianpostgresql-commonMatch125
ORdebianpostgresql-commonMatch126
ORdebianpostgresql-commonMatch127
ORdebianpostgresql-commonMatch128
ORdebianpostgresql-commonMatch129
ORdebianpostgresql-commonMatch129ubuntu1
canonicalubuntu_linuxMatch12.04lts
Node
debianpostgresql-commonMatch148
ORdebianpostgresql-commonMatch149
ORdebianpostgresql-commonMatch150
ORdebianpostgresql-commonMatch151
ORdebianpostgresql-commonMatch152
ORdebianpostgresql-commonMatch153
ORdebianpostgresql-commonMatch153bzr1
ORdebianpostgresql-commonMatch154
ORdebianpostgresql-commonMatch154ubuntu1
canonicalubuntu_linuxMatch14.04lts
Node
debianpostgresql-commonMatch169git1
ORdebianpostgresql-commonMatch170
ORdebianpostgresql-commonMatch171
ORdebianpostgresql-commonMatch172
ORdebianpostgresql-commonMatch172ubuntu1
ORdebianpostgresql-commonMatch173
canonicalubuntu_linuxMatch16.04lts
Node
debianpostgresql-commonMatch176\+git1
ORdebianpostgresql-commonMatch177git1
ORdebianpostgresql-commonMatch177ubuntu1
ORdebianpostgresql-commonMatch178
ORdebianpostgresql-commonMatch179
canonicalubuntu_linuxMatch17.04
Node
debianpostgresql-commonMatch179
ORdebianpostgresql-commonMatch181
ORdebianpostgresql-commonMatch181ubuntu1
ORdebianpostgresql-commonMatch183
ORdebianpostgresql-commonMatch184
ORdebianpostgresql-commonMatch184ubuntu1
canonicalubuntu_linuxMatch17.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| debian | postgresql-common | 1 | cpe:2.3:a:debian:postgresql-common:1:*:*:*:*:*:*:* |
| debian | postgresql-common | 2 | cpe:2.3:a:debian:postgresql-common:2:*:*:*:*:*:*:* |
| debian | postgresql-common | 3 | cpe:2.3:a:debian:postgresql-common:3:*:*:*:*:*:*:* |
| debian | postgresql-common | 4 | cpe:2.3:a:debian:postgresql-common:4:*:*:*:*:*:*:* |
| debian | postgresql-common | 5 | cpe:2.3:a:debian:postgresql-common:5:*:*:*:*:*:*:* |
| debian | postgresql-common | 6 | cpe:2.3:a:debian:postgresql-common:6:*:*:*:*:*:*:* |
| debian | postgresql-common | 7 | cpe:2.3:a:debian:postgresql-common:7:*:*:*:*:*:*:* |
| debian | postgresql-common | 8 | cpe:2.3:a:debian:postgresql-common:8:*:*:*:*:*:*:* |
| debian | postgresql-common | 9 | cpe:2.3:a:debian:postgresql-common:9:*:*:*:*:*:*:* |
| debian | postgresql-common | 10 | cpe:2.3:a:debian:postgresql-common:10:*:*:*:*:*:*:* |
Related
debiancve
debiancve
CVE-2016-1255
2017-12-05 16:29:00
osv
osv
postgresql-common - security update
2017-01-01 00:00:00
prion
prion
Code injection
2017-12-05 16:29:00
ubuntucve
ubuntucve
CVE-2016-1255
2016-12-20 00:00:00
CVE-2017-8806
2017-11-09 00:00:00
debian
debian
[SECURITY] [DLA-774-1] postgresql-common security update
2017-01-01 18:54:19
openvas
openvas
Debian: Security Advisory (DLA-774-1)
2023-03-08 00:00:00
Ubuntu: Security Advisory (USN-3476-1)
2017-11-10 00:00:00
Ubuntu: Security Advisory (USN-3476-2)
2022-08-26 00:00:00
nvd
nvd
CVE-2016-1255
2017-12-05 16:29:00
cvelist
cvelist
CVE-2016-1255
2017-12-05 16:00:00
nessus
nessus
Debian DLA-774-1 : postgresql-common security update
2017-01-03 00:00:00
ubuntu
ubuntu
postgresql-common vulnerabilities
2017-11-27 00:00:00
postgresql-common vulnerabilities
2017-11-09 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
5.8
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVE-2016-1255