{"schemaVersion":3,"id":"CVE-2016-1255","aliases":["UBUNTU-CVE-2016-1255","DEBIAN-CVE-2016-1255","DLA-774-1"],"status":"published","duplicateOf":null,"title":null,"description":"The pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie before 165+deb8u2, in Debian unstable before 178, in Ubuntu 12.04 LTS before 129ubuntu1.2, in Ubuntu 14.04 LTS before 154ubuntu1.1, in Ubuntu 16.04 LTS before 173ubuntu0.1, in Ubuntu 17.04 before 179ubuntu0.1, and in Ubuntu 17.10 before 184ubuntu1.1 allows local users to gain root privileges via a symlink attack on a logfile in /var/log/postgresql.","dates":{"published":"2017-12-05T16:00:00.000Z","modified":"2024-08-05T22:48:13.668Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.2,"severity":"high","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":7.8,"severity":"high","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":4.6,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":7.8,"severity":"high","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":4.6,"impact":9.8,"computed":true}]},"epss":{"probability":0.00421,"percentile":0.35077,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00421},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00421,"percentile":0.35077}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00433,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00421,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00421,"percentile":0.35077}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-59","name":"Improper Link Resolution Before File Access ('Link Following')","description":"The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/59.html"}],"affected":[{"vendor":"debian","product":"postgresql-common","name":"postgresql-common","label":"postgresql-common","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/postgresql-common","purlType":"deb","versions":[{"text":"< 178","noFixRecorded":false,"fixedIn":null},{"text":"< 134wheezy5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 178 | < 134wheezy5","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-common","name":"postgresql-common","label":"postgresql-common","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-common","purlType":"deb","versions":[{"text":"< 154ubuntu1.1","noFixRecorded":false,"fixedIn":null},{"text":"< 173ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 154ubuntu1.1 | < 173ubuntu0.1","eol":null,"hubHref":null},{"vendor":"debian","product":"postgresql-common","name":"postgresql-common","label":"postgresql-common","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1","noFixRecorded":false,"fixedIn":null},{"text":"2","noFixRecorded":false,"fixedIn":null},{"text":"3","noFixRecorded":false,"fixedIn":null},{"text":"4","noFixRecorded":false,"fixedIn":null},{"text":"5","noFixRecorded":false,"fixedIn":null},{"text":"6","noFixRecorded":false,"fixedIn":null},{"text":"7","noFixRecorded":false,"fixedIn":null},{"text":"8","noFixRecorded":false,"fixedIn":null},{"text":"9","noFixRecorded":false,"fixedIn":null},{"text":"10","noFixRecorded":false,"fixedIn":null},{"text":"11","noFixRecorded":false,"fixedIn":null},{"text":"12","noFixRecorded":false,"fixedIn":null},{"text":"13","noFixRecorded":false,"fixedIn":null},{"text":"14","noFixRecorded":false,"fixedIn":null},{"text":"15","noFixRecorded":false,"fixedIn":null},{"text":"16","noFixRecorded":false,"fixedIn":null},{"text":"17","noFixRecorded":false,"fixedIn":null},{"text":"18","noFixRecorded":false,"fixedIn":null},{"text":"19","noFixRecorded":false,"fixedIn":null},{"text":"20","noFixRecorded":false,"fixedIn":null},{"text":"21","noFixRecorded":false,"fixedIn":null},{"text":"22","noFixRecorded":false,"fixedIn":null},{"text":"23","noFixRecorded":false,"fixedIn":null},{"text":"24","noFixRecorded":false,"fixedIn":null},{"text":"25","noFixRecorded":false,"fixedIn":null},{"text":"26","noFixRecorded":false,"fixedIn":null},{"text":"27","noFixRecorded":false,"fixedIn":null},{"text":"28","noFixRecorded":false,"fixedIn":null},{"text":"29","noFixRecorded":false,"fixedIn":null},{"text":"30","noFixRecorded":false,"fixedIn":null},{"text":"31","noFixRecorded":false,"fixedIn":null},{"text":"32","noFixRecorded":false,"fixedIn":null},{"text":"33","noFixRecorded":false,"fixedIn":null},{"text":"34","noFixRecorded":false,"fixedIn":null},{"text":"35","noFixRecorded":false,"fixedIn":null},{"text":"36","noFixRecorded":false,"fixedIn":null},{"text":"37","noFixRecorded":false,"fixedIn":null},{"text":"38","noFixRecorded":false,"fixedIn":null},{"text":"39","noFixRecorded":false,"fixedIn":null},{"text":"40","noFixRecorded":false,"fixedIn":null},{"text":"41","noFixRecorded":false,"fixedIn":null},{"text":"42","noFixRecorded":false,"fixedIn":null},{"text":"43","noFixRecorded":false,"fixedIn":null},{"text":"44","noFixRecorded":false,"fixedIn":null},{"text":"45","noFixRecorded":false,"fixedIn":null},{"text":"46","noFixRecorded":false,"fixedIn":null},{"text":"47","noFixRecorded":false,"fixedIn":null},{"text":"48","noFixRecorded":false,"fixedIn":null},{"text":"49","noFixRecorded":false,"fixedIn":null},{"text":"50","noFixRecorded":false,"fixedIn":null},{"text":"51","noFixRecorded":false,"fixedIn":null},{"text":"52","noFixRecorded":false,"fixedIn":null},{"text":"53","noFixRecorded":false,"fixedIn":null},{"text":"54","noFixRecorded":false,"fixedIn":null},{"text":"55","noFixRecorded":false,"fixedIn":null},{"text":"56","noFixRecorded":false,"fixedIn":null},{"text":"57","noFixRecorded":false,"fixedIn":null},{"text":"58","noFixRecorded":false,"fixedIn":null},{"text":"59","noFixRecorded":false,"fixedIn":null},{"text":"60","noFixRecorded":false,"fixedIn":null},{"text":"61","noFixRecorded":false,"fixedIn":null},{"text":"62","noFixRecorded":false,"fixedIn":null},{"text":"63","noFixRecorded":false,"fixedIn":null},{"text":"64","noFixRecorded":false,"fixedIn":null},{"text":"65","noFixRecorded":false,"fixedIn":null},{"text":"66","noFixRecorded":false,"fixedIn":null},{"text":"67","noFixRecorded":false,"fixedIn":null},{"text":"68","noFixRecorded":false,"fixedIn":null},{"text":"69","noFixRecorded":false,"fixedIn":null},{"text":"70","noFixRecorded":false,"fixedIn":null},{"text":"71","noFixRecorded":false,"fixedIn":null},{"text":"72","noFixRecorded":false,"fixedIn":null},{"text":"73","noFixRecorded":false,"fixedIn":null},{"text":"74","noFixRecorded":false,"fixedIn":null},{"text":"75","noFixRecorded":false,"fixedIn":null},{"text":"76","noFixRecorded":false,"fixedIn":null},{"text":"77","noFixRecorded":false,"fixedIn":null},{"text":"78","noFixRecorded":false,"fixedIn":null},{"text":"79","noFixRecorded":false,"fixedIn":null},{"text":"80","noFixRecorded":false,"fixedIn":null},{"text":"81","noFixRecorded":false,"fixedIn":null},{"text":"82","noFixRecorded":false,"fixedIn":null},{"text":"83","noFixRecorded":false,"fixedIn":null},{"text":"84","noFixRecorded":false,"fixedIn":null},{"text":"85","noFixRecorded":false,"fixedIn":null},{"text":"86","noFixRecorded":false,"fixedIn":null},{"text":"87","noFixRecorded":false,"fixedIn":null},{"text":"88","noFixRecorded":false,"fixedIn":null},{"text":"89","noFixRecorded":false,"fixedIn":null},{"text":"90","noFixRecorded":false,"fixedIn":null},{"text":"91","noFixRecorded":false,"fixedIn":null},{"text":"92","noFixRecorded":false,"fixedIn":null},{"text":"93","noFixRecorded":false,"fixedIn":null},{"text":"94","noFixRecorded":false,"fixedIn":null},{"text":"95","noFixRecorded":false,"fixedIn":null},{"text":"96","noFixRecorded":false,"fixedIn":null},{"text":"97","noFixRecorded":false,"fixedIn":null},{"text":"98","noFixRecorded":false,"fixedIn":null},{"text":"99","noFixRecorded":false,"fixedIn":null},{"text":"100","noFixRecorded":false,"fixedIn":null},{"text":"101","noFixRecorded":false,"fixedIn":null},{"text":"102","noFixRecorded":false,"fixedIn":null},{"text":"103","noFixRecorded":false,"fixedIn":null},{"text":"104","noFixRecorded":false,"fixedIn":null},{"text":"105","noFixRecorded":false,"fixedIn":null},{"text":"106","noFixRecorded":false,"fixedIn":null},{"text":"107","noFixRecorded":false,"fixedIn":null},{"text":"108","noFixRecorded":false,"fixedIn":null},{"text":"109","noFixRecorded":false,"fixedIn":null},{"text":"110","noFixRecorded":false,"fixedIn":null},{"text":"111","noFixRecorded":false,"fixedIn":null},{"text":"112","noFixRecorded":false,"fixedIn":null},{"text":"113","noFixRecorded":false,"fixedIn":null},{"text":"114","noFixRecorded":false,"fixedIn":null},{"text":"115","noFixRecorded":false,"fixedIn":null},{"text":"116","noFixRecorded":false,"fixedIn":null},{"text":"117","noFixRecorded":false,"fixedIn":null},{"text":"118","noFixRecorded":false,"fixedIn":null},{"text":"119","noFixRecorded":false,"fixedIn":null},{"text":"120","noFixRecorded":false,"fixedIn":null},{"text":"121","noFixRecorded":false,"fixedIn":null},{"text":"122","noFixRecorded":false,"fixedIn":null},{"text":"123","noFixRecorded":false,"fixedIn":null},{"text":"124","noFixRecorded":false,"fixedIn":null},{"text":"125","noFixRecorded":false,"fixedIn":null},{"text":"126","noFixRecorded":false,"fixedIn":null},{"text":"127","noFixRecorded":false,"fixedIn":null},{"text":"128","noFixRecorded":false,"fixedIn":null},{"text":"129","noFixRecorded":false,"fixedIn":null},{"text":"130","noFixRecorded":false,"fixedIn":null},{"text":"131","noFixRecorded":false,"fixedIn":null},{"text":"132","noFixRecorded":false,"fixedIn":null},{"text":"133","noFixRecorded":false,"fixedIn":null},{"text":"134","noFixRecorded":false,"fixedIn":null},{"text":"135","noFixRecorded":false,"fixedIn":null},{"text":"136","noFixRecorded":false,"fixedIn":null},{"text":"137","noFixRecorded":false,"fixedIn":null},{"text":"138","noFixRecorded":false,"fixedIn":null},{"text":"139","noFixRecorded":false,"fixedIn":null},{"text":"140","noFixRecorded":false,"fixedIn":null},{"text":"141","noFixRecorded":false,"fixedIn":null},{"text":"142","noFixRecorded":false,"fixedIn":null},{"text":"143","noFixRecorded":false,"fixedIn":null},{"text":"144","noFixRecorded":false,"fixedIn":null},{"text":"145","noFixRecorded":false,"fixedIn":null},{"text":"146","noFixRecorded":false,"fixedIn":null},{"text":"147","noFixRecorded":false,"fixedIn":null},{"text":"148","noFixRecorded":false,"fixedIn":null},{"text":"149","noFixRecorded":false,"fixedIn":null},{"text":"150","noFixRecorded":false,"fixedIn":null},{"text":"151","noFixRecorded":false,"fixedIn":null},{"text":"152","noFixRecorded":false,"fixedIn":null},{"text":"153","noFixRecorded":false,"fixedIn":null},{"text":"154","noFixRecorded":false,"fixedIn":null},{"text":"155","noFixRecorded":false,"fixedIn":null},{"text":"156","noFixRecorded":false,"fixedIn":null},{"text":"157","noFixRecorded":false,"fixedIn":null},{"text":"158","noFixRecorded":false,"fixedIn":null},{"text":"159","noFixRecorded":false,"fixedIn":null},{"text":"160","noFixRecorded":false,"fixedIn":null},{"text":"161","noFixRecorded":false,"fixedIn":null},{"text":"162","noFixRecorded":false,"fixedIn":null},{"text":"163","noFixRecorded":false,"fixedIn":null},{"text":"164","noFixRecorded":false,"fixedIn":null},{"text":"122ubuntu1","noFixRecorded":false,"fixedIn":null},{"text":"129ubuntu1","noFixRecorded":false,"fixedIn":null},{"text":"153bzr1","noFixRecorded":false,"fixedIn":null},{"text":"154ubuntu1","noFixRecorded":false,"fixedIn":null},{"text":"169git1","noFixRecorded":false,"fixedIn":null},{"text":"170","noFixRecorded":false,"fixedIn":null},{"text":"171","noFixRecorded":false,"fixedIn":null},{"text":"172","noFixRecorded":false,"fixedIn":null},{"text":"172ubuntu1","noFixRecorded":false,"fixedIn":null},{"text":"173","noFixRecorded":false,"fixedIn":null},{"text":"176\\+git1","noFixRecorded":false,"fixedIn":null},{"text":"177git1","noFixRecorded":false,"fixedIn":null},{"text":"177ubuntu1","noFixRecorded":false,"fixedIn":null},{"text":"178","noFixRecorded":false,"fixedIn":null},{"text":"179","noFixRecorded":false,"fixedIn":null},{"text":"181","noFixRecorded":false,"fixedIn":null},{"text":"181ubuntu1","noFixRecorded":false,"fixedIn":null},{"text":"183","noFixRecorded":false,"fixedIn":null},{"text":"184","noFixRecorded":false,"fixedIn":null},{"text":"184ubuntu1","noFixRecorded":false,"fixedIn":null}],"versionsText":"1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 122ubuntu1 | 129ubuntu1 | 153bzr1 | 154ubuntu1 | 169git1 | 170 | 171 | 172 | 172ubuntu1 | 173 | 176\\+git1 | 177git1 | 177ubuntu1 | 178 | 179 | 181 | 181ubuntu1 | 183 | 184 | 184ubuntu1","eol":null,"hubHref":"/vendor/debian/postgresql-common"}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.debian.org/debian-lts-announce/2017/01/msg00002.html","label":"lists.debian.org/debian-lts-announce/2017/01/msg00002.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST","Issue Tracking","Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3476-1","label":"www.ubuntu.com/usn/USN-3476-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Issue Tracking","Third Party Advisory"]},{"url":"https://anonscm.debian.org/cgit/pkg-postgresql/postgresql-common.git/commit/?id=c8989206ec360f199400c74f129f7b4cb878c1ee","label":"anonscm.debian.org/cgit/…","hostname":"anonscm.debian.org","tags":["X Refsource CONFIRM","Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3476-2","label":"www.ubuntu.com/usn/USN-3476-2","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Issue Tracking","Third Party Advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-1255","label":"ubuntu.com/security/CVE-2016-1255","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://anonscm.debian.org/cgit/pkg-postgresql/postgresql-common.git/log/","label":"anonscm.debian.org/cgit/pkg-postgresql/postgresql-common.git/log/","hostname":"anonscm.debian.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-3476-1","label":"ubuntu.com/security/notices/USN-3476-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3476-2","label":"ubuntu.com/security/notices/USN-3476-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1255","label":"www.cve.org/CVERecord?id=CVE-2016-1255","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-1255","label":"security-tracker.debian.org/tracker/CVE-2016-1255","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["USN-3476-1"],"duplicates":[],"related":["USN-3476-1"]},"timeline":[{"kind":"published","date":"2017-12-05T16:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T22:48:13.668Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:20:12.036Z","stale":false,"partial":false}}