CVE-2019-3466

The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which…

published November 20, 2019

CVSS
—
EPSS
0%
Percentile
41.8
In the wild
Unconfirmed
What it is

The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00499 · 41.8th percentile
Published
2019-11-20T17:16Z
EPSS history
Timeline
  • 20 NOV 17:16Z
    The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which…
    cvelistv5