Detections
Analytics

Echo: postgresql-common: security update to 178

high Tenable Cloud Security Plugin ID 460354

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - The pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie
 before 165+deb8u2, in Debian unstable before 178, in Ubuntu 12.04 LTS before 129ubuntu1.2, in Ubuntu 14.04
 LTS before 154ubuntu1.1, in Ubuntu 16.04 LTS before 173ubuntu0.1, in Ubuntu 17.04 before 179ubuntu0.1, and
 in Ubuntu 17.10 before 184ubuntu1.1 allows local users to gain root privileges via a symlink attack on a
 logfile in /var/log/postgresql. (CVE-2016-1255)

Solution

Update the postgresql-common library and its related packages to version 178 or later.

See Also

https://advisory.echohq.com/cve/CVE-2016-1255

Plugin Details

Severity: High

ID: 460354

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.12

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2016-1255

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 1/1/2026

Vulnerability Publication Date: 12/5/2017

Reference Information

CVE: CVE-2016-1255