VulnerabilityModified

CVE-2016-1255

HIGH 7.8EPSS 0.42%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.42%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie before 165+deb8u2, in Debian unstable before 178, in Ubuntu 12.04 LTS before 129ubuntu1.2, in Ubuntu 14.04 LTS before 154ubuntu1.1, in Ubuntu 16.04 LTS before 173ubuntu0.1, in Ubuntu 17.04 before 179ubuntu0.1, and in Ubuntu 17.10 before 184ubuntu1.1 allows local users to gain root privileges via a symlink attack on a logfile in /var/log/postgresql.

CVSS 3.0: 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.42% probability · 36th percentile
CISA KEV: Not listed
Weakness: CWE-59
Affected: debian/postgresql-common
Source: security@debian.org

References

http://www.ubuntu.com/usn/USN-3476-1Issue Tracking, Third Party Advisory
http://www.ubuntu.com/usn/USN-3476-2Issue Tracking, Third Party Advisory
https://anonscm.debian.org/cgit/pkg-postgresql/postgresql-common.git/commit/?id=c8989206ec360f199400c74f129f7b4cb878c1eeIssue Tracking, Patch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2017/01/msg00002.htmlIssue Tracking, Vendor Advisory
http://www.ubuntu.com/usn/USN-3476-1Issue Tracking, Third Party Advisory
http://www.ubuntu.com/usn/USN-3476-2Issue Tracking, Third Party Advisory
https://anonscm.debian.org/cgit/pkg-postgresql/postgresql-common.git/commit/?id=c8989206ec360f199400c74f129f7b4cb878c1eeIssue Tracking, Patch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2017/01/msg00002.htmlIssue Tracking, Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.