Security Vulnerability in postgresql-common
Summary
DLA-1169-1: postgresql-common - security update. Affects postgresql-common versions < 134wheezy6. Fixed in 134wheezy6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
postgresql-common is a package in Debian's ecosystem that provides management tools for PostgreSQL database clusters. It is responsible for handling various administrative tasks related to PostgreSQL databases. However, a security vulnerability has been discovered in postgresql-common that could potentially lead to local denial of service attacks by overwriting arbitrary files. This vulnerability affects Debian 7 Wheezy.
Vulnerability Detail
The vulnerability, identified as CVE-2017-8806, specifically affects the pg_ctlcluster, pg_createcluster, and pg_upgradecluster commands in postgresql-common. These commands handle symbolic links insecurely, allowing an attacker to overwrite arbitrary files on the system. By exploiting this vulnerability, an attacker could disrupt the normal functioning of the system and potentially gain unauthorized access to sensitive information.
How To Fix
Minimum fixed version
134wheezy6
This is the first release that contains the fix.
sudo apt-get install --only-upgrade postgresql-commonTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, applying the recommended fix by upgrading the postgresql-common package to the fixed version should mitigate the issue.
Conclusion
In conclusion, the postgresql-common package in Debian 7 Wheezy is affected by a security vulnerability that allows for local denial of service attacks and potential unauthorized access to sensitive information. To mitigate this vulnerability, it is crucial to upgrade the postgresql-common package to version 134wheezy6. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for postgresql-common →
FAQ
postgresql-common is a package in Debian's ecosystem that provides management tools for PostgreSQL database clusters. It simplifies the process of creating, upgrading, and managing PostgreSQL database instances.
The vulnerability allows an attacker to overwrite arbitrary files on the system, potentially leading to local denial of service attacks and unauthorized access to sensitive information.
This vulnerability affects Debian 7 Wheezy.
To fix this vulnerability, it is recommended to upgrade the postgresql-common package to version 134wheezy6.
There is no specific workaround mentioned for this vulnerability. However, applying the recommended fix by upgrading the postgresql-common package should mitigate the issue.
Related vulnerabilities
Recent vulnerabilities recorded for postgresql-common.
