CVE-2016-1255: High severity postgresql vulnerability
Published Dec 5, 2017
ยทUpdated
Last updated 24 July 2024
Other sources
The pgctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie before 165+deb8u2, in Debian unstable before 178, in Ubuntu 12.04 LTS before 129ubuntu1.2, in Ubuntu 14.04 LTS before 154ubuntu1.1, in Ubuntu 16.04 LTS before 173ubuntu0.1, in Ubuntu 17.04 before 179ubuntu0.1, and in Ubuntu 17.10 before 184ubuntu1.1 allows local users to gain root privileges via a symlink attack on a logfile in /var/log/postgresql.
Affected Software
531 affected componentsFixes available
debian/postgresql-common
225+deb11u1248264
All of the following
Any of the following
Debian postgresql-common=1
Debian postgresql-common=2
Debian postgresql-common=3
Debian postgresql-common=4
Debian postgresql-common=5
Debian postgresql-common=6
Debian postgresql-common=7
Debian postgresql-common=8
Debian postgresql-common=9
Debian postgresql-common=10
Debian postgresql-common=11
Debian postgresql-common=12
Debian postgresql-common=13
Debian postgresql-common=14
Debian postgresql-common=15
Debian postgresql-common=16
Debian postgresql-common=17
Debian postgresql-common=18
Debian postgresql-common=19
Debian postgresql-common=20
Debian postgresql-common=21
Debian postgresql-common=22
Debian postgresql-common=23
Debian postgresql-common=24
Debian postgresql-common=25
Debian postgresql-common=26
Debian postgresql-common=27
Debian postgresql-common=28
Debian postgresql-common=29
Debian postgresql-common=30
Debian postgresql-common=31
Debian postgresql-common=32
Debian postgresql-common=33
Debian postgresql-common=34
Debian postgresql-common=35
Debian postgresql-common=36
Debian postgresql-common=37
Debian postgresql-common=38
Debian postgresql-common=39
Debian postgresql-common=40
Debian postgresql-common=41
Debian postgresql-common=42
Debian postgresql-common=43
Debian postgresql-common=44
Debian postgresql-common=45
Debian postgresql-common=46
Debian postgresql-common=47
Debian postgresql-common=48
Debian postgresql-common=49
Debian postgresql-common=50
Debian postgresql-common=51
Debian postgresql-common=52
Debian postgresql-common=53
Debian postgresql-common=54
Debian postgresql-common=55
Debian postgresql-common=56
Debian postgresql-common=57
Debian postgresql-common=58
Debian postgresql-common=59
Debian postgresql-common=60
Debian postgresql-common=61
Debian postgresql-common=62
Debian postgresql-common=63
Debian postgresql-common=64
Debian postgresql-common=65
Debian postgresql-common=66
Debian postgresql-common=67
Debian postgresql-common=68
Debian postgresql-common=69
Debian postgresql-common=70
Debian postgresql-common=71
Debian postgresql-common=72
Debian postgresql-common=73
Debian postgresql-common=74
Debian postgresql-common=75
Debian postgresql-common=76
Debian postgresql-common=77
Debian postgresql-common=78
Debian postgresql-common=79
Debian postgresql-common=80
Debian postgresql-common=81
Debian postgresql-common=82
Debian postgresql-common=83
Debian postgresql-common=84
Debian postgresql-common=85
Debian postgresql-common=86
Debian postgresql-common=87
Debian postgresql-common=88
Debian postgresql-common=89
Debian postgresql-common=90
Debian postgresql-common=91
Debian postgresql-common=92
Debian postgresql-common=93
Debian postgresql-common=94
Debian postgresql-common=95
Debian postgresql-common=96
Debian postgresql-common=97
Debian postgresql-common=98
Debian postgresql-common=99
Debian postgresql-common=100
Debian postgresql-common=101
Debian postgresql-common=102
Debian postgresql-common=103
Debian postgresql-common=104
Debian postgresql-common=105
Debian postgresql-common=106
Debian postgresql-common=107
Debian postgresql-common=108
Debian postgresql-common=109
Debian postgresql-common=110
Debian postgresql-common=111
Debian postgresql-common=112
Debian postgresql-common=113
Debian postgresql-common=114
Debian postgresql-common=115
Debian postgresql-common=116
Debian postgresql-common=117
Debian postgresql-common=118
Debian postgresql-common=119
Debian postgresql-common=120
Debian postgresql-common=121
Debian postgresql-common=122
Debian postgresql-common=123
Debian postgresql-common=124
Debian postgresql-common=125
Debian postgresql-common=126
Debian postgresql-common=127
Debian postgresql-common=128
Debian postgresql-common=129
Debian postgresql-common=130
Debian postgresql-common=131
Debian postgresql-common=132
Debian postgresql-common=133
Debian Debian Linux=7.0
All of the following
Any of the following
Debian postgresql-common=1
Debian postgresql-common=2
Debian postgresql-common=3
Debian postgresql-common=4
Debian postgresql-common=5
Debian postgresql-common=6
Debian postgresql-common=7
Debian postgresql-common=8
Debian postgresql-common=9
Debian postgresql-common=10
Debian postgresql-common=11
Debian postgresql-common=12
Debian postgresql-common=13
Debian postgresql-common=14
Debian postgresql-common=15
Debian postgresql-common=16
Debian postgresql-common=17
Debian postgresql-common=18
Debian postgresql-common=19
Debian postgresql-common=20
Debian postgresql-common=21
Debian postgresql-common=22
Debian postgresql-common=23
Debian postgresql-common=24
Debian postgresql-common=25
Debian postgresql-common=26
Debian postgresql-common=27
Debian postgresql-common=28
Debian postgresql-common=29
Debian postgresql-common=30
Debian postgresql-common=31
Debian postgresql-common=32
Debian postgresql-common=33
Debian postgresql-common=34
Debian postgresql-common=35
Debian postgresql-common=36
Debian postgresql-common=37
Debian postgresql-common=38
Debian postgresql-common=39
Debian postgresql-common=40
Debian postgresql-common=41
Debian postgresql-common=42
Debian postgresql-common=43
Debian postgresql-common=44
Debian postgresql-common=45
Debian postgresql-common=46
Debian postgresql-common=47
Debian postgresql-common=48
Debian postgresql-common=49
Debian postgresql-common=50
Debian postgresql-common=51
Debian postgresql-common=52
Debian postgresql-common=53
Debian postgresql-common=54
Debian postgresql-common=55
Debian postgresql-common=56
Debian postgresql-common=57
Debian postgresql-common=58
Debian postgresql-common=59
Debian postgresql-common=60
Debian postgresql-common=61
Debian postgresql-common=62
Debian postgresql-common=63
Debian postgresql-common=64
Debian postgresql-common=65
Debian postgresql-common=66
Debian postgresql-common=67
Debian postgresql-common=68
Debian postgresql-common=69
Debian postgresql-common=70
Debian postgresql-common=71
Debian postgresql-common=72
Debian postgresql-common=73
Debian postgresql-common=74
Debian postgresql-common=75
Debian postgresql-common=76
Debian postgresql-common=77
Debian postgresql-common=78
Debian postgresql-common=79
Debian postgresql-common=80
Debian postgresql-common=81
Debian postgresql-common=82
Debian postgresql-common=83
Debian postgresql-common=84
Debian postgresql-common=85
Debian postgresql-common=86
Debian postgresql-common=87
Debian postgresql-common=88
Debian postgresql-common=89
Debian postgresql-common=90
Debian postgresql-common=91
Debian postgresql-common=92
Debian postgresql-common=93
Debian postgresql-common=94
Debian postgresql-common=95
Debian postgresql-common=96
Debian postgresql-common=97
Debian postgresql-common=98
Debian postgresql-common=99
Debian postgresql-common=100
Debian postgresql-common=101
Debian postgresql-common=102
Debian postgresql-common=103
Debian postgresql-common=104
Debian postgresql-common=105
Debian postgresql-common=106
Debian postgresql-common=107
Debian postgresql-common=108
Debian postgresql-common=109
Debian postgresql-common=110
Debian postgresql-common=111
Debian postgresql-common=112
Debian postgresql-common=113
Debian postgresql-common=114
Debian postgresql-common=115
Debian postgresql-common=116
Debian postgresql-common=117
Debian postgresql-common=118
Debian postgresql-common=119
Debian postgresql-common=120
Debian postgresql-common=121
Debian postgresql-common=122
Debian postgresql-common=123
Debian postgresql-common=124
Debian postgresql-common=125
Debian postgresql-common=126
Debian postgresql-common=127
Debian postgresql-common=128
Debian postgresql-common=129
Debian postgresql-common=130
Debian postgresql-common=131
Debian postgresql-common=132
Debian postgresql-common=133
Debian postgresql-common=134
Debian postgresql-common=135
Debian postgresql-common=136
Debian postgresql-common=137
Debian postgresql-common=138
Debian postgresql-common=139
Debian postgresql-common=140
Debian postgresql-common=141
Debian postgresql-common=142
Debian postgresql-common=143
Debian postgresql-common=144
Debian postgresql-common=145
Debian postgresql-common=146
Debian postgresql-common=147
Debian postgresql-common=148
Debian postgresql-common=149
Debian postgresql-common=150
Debian postgresql-common=151
Debian postgresql-common=152
Debian postgresql-common=153
Debian postgresql-common=154
Debian postgresql-common=155
Debian postgresql-common=156
Debian postgresql-common=157
Debian postgresql-common=158
Debian postgresql-common=159
Debian postgresql-common=160
Debian postgresql-common=161
Debian postgresql-common=162
Debian postgresql-common=163
Debian postgresql-common=164
Debian Debian Linux=8.0
All of the following
Any of the following
Debian postgresql-common=122
Debian postgresql-common=122ubuntu1
Debian postgresql-common=124
Debian postgresql-common=125
Debian postgresql-common=126
Debian postgresql-common=127
Debian postgresql-common=128
Debian postgresql-common=129
Debian postgresql-common=129ubuntu1
Canonical Ubuntu Linux=12.04
All of the following
Any of the following
Debian postgresql-common=148
Debian postgresql-common=149
Debian postgresql-common=150
Debian postgresql-common=151
Debian postgresql-common=152
Debian postgresql-common=153
Debian postgresql-common=153bzr1
Debian postgresql-common=154
Debian postgresql-common=154ubuntu1
Canonical Ubuntu Linux=14.04
All of the following
Any of the following
Debian postgresql-common=169git1
Debian postgresql-common=170
Debian postgresql-common=171
Debian postgresql-common=172
Debian postgresql-common=172ubuntu1
Debian postgresql-common=173
Canonical Ubuntu Linux=16.04
All of the following
Any of the following
Debian postgresql-common=176\+git1
Debian postgresql-common=177git1
Debian postgresql-common=177ubuntu1
Debian postgresql-common=178
Debian postgresql-common=179
Canonical Ubuntu Linux=17.04
All of the following
Any of the following
Debian postgresql-common=179
Debian postgresql-common=181
Debian postgresql-common=181ubuntu1
Debian postgresql-common=183
Debian postgresql-common=184
Debian postgresql-common=184ubuntu1
Canonical Ubuntu Linux=17.10
Debian postgresql-common=1
Debian postgresql-common=2
Debian postgresql-common=3
Debian postgresql-common=4
Debian postgresql-common=5
Debian postgresql-common=6
Debian postgresql-common=7
Debian postgresql-common=8
Debian postgresql-common=9
Debian postgresql-common=10
Debian postgresql-common=11
Debian postgresql-common=12
Debian postgresql-common=13
Debian postgresql-common=14
Debian postgresql-common=15
Debian postgresql-common=16
Debian postgresql-common=17
Debian postgresql-common=18
Debian postgresql-common=19
Debian postgresql-common=20
Debian postgresql-common=21
Debian postgresql-common=22
Debian postgresql-common=23
Debian postgresql-common=24
Debian postgresql-common=25
Debian postgresql-common=26
Debian postgresql-common=27
Debian postgresql-common=28
Debian postgresql-common=29
Debian postgresql-common=30
Debian postgresql-common=31
Debian postgresql-common=32
Debian postgresql-common=33
Debian postgresql-common=34
Debian postgresql-common=35
Debian postgresql-common=36
Debian postgresql-common=37
Debian postgresql-common=38
Debian postgresql-common=39
Debian postgresql-common=40
Debian postgresql-common=41
Debian postgresql-common=42
Debian postgresql-common=43
Debian postgresql-common=44
Debian postgresql-common=45
Debian postgresql-common=46
Debian postgresql-common=47
Debian postgresql-common=48
Debian postgresql-common=49
Debian postgresql-common=50
Debian postgresql-common=51
Debian postgresql-common=52
Debian postgresql-common=53
Debian postgresql-common=54
Debian postgresql-common=55
Debian postgresql-common=56
Debian postgresql-common=57
Debian postgresql-common=58
Debian postgresql-common=59
Debian postgresql-common=60
Debian postgresql-common=61
Debian postgresql-common=62
Debian postgresql-common=63
Debian postgresql-common=64
Debian postgresql-common=65
Debian postgresql-common=66
Debian postgresql-common=67
Debian postgresql-common=68
Debian postgresql-common=69
Debian postgresql-common=70
Debian postgresql-common=71
Debian postgresql-common=72
Debian postgresql-common=73
Debian postgresql-common=74
Debian postgresql-common=75
Debian postgresql-common=76
Debian postgresql-common=77
Debian postgresql-common=78
Debian postgresql-common=79
Debian postgresql-common=80
Debian postgresql-common=81
Debian postgresql-common=82
Debian postgresql-common=83
Debian postgresql-common=84
Debian postgresql-common=85
Debian postgresql-common=86
Debian postgresql-common=87
Debian postgresql-common=88
Debian postgresql-common=89
Debian postgresql-common=90
Debian postgresql-common=91
Debian postgresql-common=92
Debian postgresql-common=93
Debian postgresql-common=94
Debian postgresql-common=95
Debian postgresql-common=96
Debian postgresql-common=97
Debian postgresql-common=98
Debian postgresql-common=99
Debian postgresql-common=100
Debian postgresql-common=101
Debian postgresql-common=102
Debian postgresql-common=103
Debian postgresql-common=104
Debian postgresql-common=105
Debian postgresql-common=106
Debian postgresql-common=107
Debian postgresql-common=108
Debian postgresql-common=109
Debian postgresql-common=110
Debian postgresql-common=111
Debian postgresql-common=112
Debian postgresql-common=113
Debian postgresql-common=114
Debian postgresql-common=115
Debian postgresql-common=116
Debian postgresql-common=117
Debian postgresql-common=118
Debian postgresql-common=119
Debian postgresql-common=120
Debian postgresql-common=121
Debian postgresql-common=122
Debian postgresql-common=123
Debian postgresql-common=124
Debian postgresql-common=125
Debian postgresql-common=126
Debian postgresql-common=127
Debian postgresql-common=128
Debian postgresql-common=129
Debian postgresql-common=130
Debian postgresql-common=131
Debian postgresql-common=132
Debian postgresql-common=133
Debian Debian Linux=7.0
Debian postgresql-common=134
Debian postgresql-common=135
Debian postgresql-common=136
Debian postgresql-common=137
Debian postgresql-common=138
Debian postgresql-common=139
Debian postgresql-common=140
Debian postgresql-common=141
Debian postgresql-common=142
Debian postgresql-common=143
Debian postgresql-common=144
Debian postgresql-common=145
Debian postgresql-common=146
Debian postgresql-common=147
Debian postgresql-common=148
Debian postgresql-common=149
Debian postgresql-common=150
Debian postgresql-common=151
Debian postgresql-common=152
Debian postgresql-common=153
Debian postgresql-common=154
Debian postgresql-common=155
Debian postgresql-common=156
Debian postgresql-common=157
Debian postgresql-common=158
Debian postgresql-common=159
Debian postgresql-common=160
Debian postgresql-common=161
Debian postgresql-common=162
Debian postgresql-common=163
Debian postgresql-common=164
Debian Debian Linux=8.0
Debian postgresql-common=122ubuntu1
Debian postgresql-common=129ubuntu1
Canonical Ubuntu Linux=12.04
Debian postgresql-common=153bzr1
Debian postgresql-common=154ubuntu1
Canonical Ubuntu Linux=14.04
Debian postgresql-common=169git1
Debian postgresql-common=170
Debian postgresql-common=171
Debian postgresql-common=172
Debian postgresql-common=172ubuntu1
Debian postgresql-common=173
Canonical Ubuntu Linux=16.04
Debian postgresql-common=176\+git1
Debian postgresql-common=177git1
Debian postgresql-common=177ubuntu1
Debian postgresql-common=178
Debian postgresql-common=179
Canonical Ubuntu Linux=17.04
Debian postgresql-common=181
Debian postgresql-common=181ubuntu1
Debian postgresql-common=183
Debian postgresql-common=184
Debian postgresql-common=184ubuntu1
Canonical Ubuntu Linux=17.10
Remediation
Event History
Dec 5, 2017
CVE Published
via MITREยท04:00 PM
Data Sourced
via MITREยท04:00 PM
Description
Jan 11, 2024
Data Sourced
via Launchpadยท10:15 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntuยท01:12 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-1255?
CVE-2016-1255 was assigned a severity score of important, indicating a noteworthy risk to system integrity.
2
How do I fix CVE-2016-1255?
To fix CVE-2016-1255, it is recommended to upgrade the postgresql-common package to version 225+deb11u1 or later.
3
Which systems are vulnerable to CVE-2016-1255?
CVE-2016-1255 affects various Debian and Ubuntu versions that include vulnerable postgresql-common packages.
4
Is CVE-2016-1255 still a risk if I upgrade my system?
No, if you upgrade to the recommended versions of the postgresql-common package, you will mitigate the risk associated with CVE-2016-1255.
5
What are the affected versions of postgresql-common regarding CVE-2016-1255?
Affected versions of postgresql-common for CVE-2016-1255 include those before 134wheezy5 in Debian, and various versions in Ubuntu prior to specific patches.