USN-4194-1: postgresql-common vulnerability
Published Nov 14, 2019
·Updated
Rich Mirch discovered that the postgresql-common pgctlcluster script incorrectly handled directory creation. A local attacker could possibly use this issue to escalate privileges.
Affected Software
8 affected componentsFixes available
All of the following
ubuntu/postgresql-common<204ubuntu0.1
204ubuntu0.1
Ubuntu Ubuntu=19.10
All of the following
ubuntu/postgresql-common<199ubuntu0.1
199ubuntu0.1
Ubuntu Ubuntu=19.04
All of the following
ubuntu/postgresql-common<190ubuntu0.1
190ubuntu0.1
Ubuntu Ubuntu=18.04
All of the following
ubuntu/postgresql-common<173ubuntu0.3
173ubuntu0.3
Ubuntu Ubuntu=16.04
Event History
Nov 14, 2019
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the vulnerability ID for this postgresql-common vulnerability?
The vulnerability ID for this postgresql-common vulnerability is USN-4194-1.
2
Who discovered the vulnerability?
The vulnerability was discovered by Rich Mirch.
3
What is the impact of this vulnerability?
The vulnerability can potentially be used by a local attacker to escalate privileges.
4
Which versions of postgresql-common are affected?
Versions 204ubuntu0.1, 199ubuntu0.1, 190ubuntu0.1, and 173ubuntu0.3 of postgresql-common are affected.
5
How can I fix this vulnerability?
It is recommended to update postgresql-common to the latest version available, as mentioned in the Ubuntu Security Notices.