CVE-2017-14798CWE-61

local privilege escalation in SUSE postgresql init script

High · published March 1, 2018

CVSS v3.0
7.3
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root.

The record
Technical detail
CVSS v3.0
7.3 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00997 · 62.1th percentile
Weakness
CWE-61 · UNIX Symbolic Link (Symlink) Following
Published
2018-03-01T19:00Z
EPSS history
Timeline
  • 01 MAR 19:00Z
    local privilege escalation in SUSE postgresql init script
    cvelistv5