CVE-2019-3466

Publication date

2019-11-20 17:16:16

Family

debian

State

PUBLISHED

Description

The pg_ctlcluster script in postgresql-common in versions prior to 210 didnt drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation.