CVE-2017-8806

State: Published
Severity: Not scored
Published: Nov 13, 2017
Updated: Aug 5, 2024
Reserved: May 7, 2017

Description

The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181+deb9u1 for PostgreSQL (and other packages related to Debian and Ubuntu), handled symbolic links insecurely, which could result in local denial of service by overwriting arbitrary files.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
PostgreSQL-related scripts that are specific to Debian and Ubuntun/a	PostgreSQL-related scripts that are specific to Debian and UbuntuAffected

References

http://metadata.ftp-master.debian.org/changelogs/main/p/postgresql-common/postgresql-common_181+deb9u1_changelog
101810vdb-entry
https://usn.ubuntu.com/usn/usn-3476-1/
https://www.debian.org/security/2017/dsa-4029

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.