Medium severity5.5NVD Advisory· Published Nov 13, 2017· Updated Jun 17, 2026

CVE-2017-8806

Description

The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181+deb9u1 for PostgreSQL (and other packages related to Debian and Ubuntu), handled symbolic links insecurely, which could result in local denial of service by overwriting arbitrary files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

217

PostgreSQL/PostgreSQL
cpe:2.3:a:postgresql:postgresql:-:*:*:*:*:*:*:*
osv-coords216 versions
pkg:apk/chainguard/ecpg-13 pkg:apk/chainguard/ecpg-14 pkg:apk/chainguard/ecpg-15 pkg:apk/chainguard/ecpg-16 pkg:apk/chainguard/ecpg-17 pkg:apk/chainguard/ecpg-18 pkg:apk/chainguard/libecpg-12 pkg:apk/chainguard/libecpg-13 pkg:apk/chainguard/libecpg-13-dev pkg:apk/chainguard/libecpg-14 pkg:apk/chainguard/libecpg-14-dev pkg:apk/chainguard/libecpg-15 pkg:apk/chainguard/libecpg-15-dev pkg:apk/chainguard/libecpg-16 pkg:apk/chainguard/libecpg-16-dev pkg:apk/chainguard/libecpg-17 pkg:apk/chainguard/libecpg-17-dev pkg:apk/chainguard/libecpg-18 pkg:apk/chainguard/libecpg-18-dev pkg:apk/chainguard/libpq-11 pkg:apk/chainguard/libpq-12 pkg:apk/chainguard/libpq-13 pkg:apk/chainguard/libpq-14 pkg:apk/chainguard/libpq-15 pkg:apk/chainguard/libpq-16 pkg:apk/chainguard/libpq-17 pkg:apk/chainguard/libpq-18 pkg:apk/chainguard/neon pkg:apk/chainguard/postgresql-11 pkg:apk/chainguard/postgresql-11-bitnami-compat pkg:apk/chainguard/postgresql-11-client pkg:apk/chainguard/postgresql-11-contrib pkg:apk/chainguard/postgresql-11-dev pkg:apk/chainguard/postgresql-11-oci-entrypoint pkg:apk/chainguard/postgresql-12 pkg:apk/chainguard/postgresql-12-base pkg:apk/chainguard/postgresql-12-bitnami-compat pkg:apk/chainguard/postgresql-12-client pkg:apk/chainguard/postgresql-12-client-base pkg:apk/chainguard/postgresql-12-contrib pkg:apk/chainguard/postgresql-12-dev pkg:apk/chainguard/postgresql-12-oci-entrypoint pkg:apk/chainguard/postgresql-12-oci-entrypoint-base pkg:apk/chainguard/postgresql-12-pgadmin-compat pkg:apk/chainguard/postgresql-13 pkg:apk/chainguard/postgresql-13-base pkg:apk/chainguard/postgresql-13-bitnami-compat pkg:apk/chainguard/postgresql-13-client pkg:apk/chainguard/postgresql-13-client-base pkg:apk/chainguard/postgresql-13-contrib pkg:apk/chainguard/postgresql-13-dev pkg:apk/chainguard/postgresql-13-oci-entrypoint pkg:apk/chainguard/postgresql-13-oci-entrypoint-base pkg:apk/chainguard/postgresql-13-pgadmin-compat pkg:apk/chainguard/postgresql-14 pkg:apk/chainguard/postgresql-14-base pkg:apk/chainguard/postgresql-14-bitnami-compat pkg:apk/chainguard/postgresql-14-client pkg:apk/chainguard/postgresql-14-client-base pkg:apk/chainguard/postgresql-14-contrib pkg:apk/chainguard/postgresql-14-dev pkg:apk/chainguard/postgresql-14-oci-entrypoint pkg:apk/chainguard/postgresql-14-oci-entrypoint-base pkg:apk/chainguard/postgresql-14-pgadmin-compat pkg:apk/chainguard/postgresql-15 pkg:apk/chainguard/postgresql-15-base pkg:apk/chainguard/postgresql-15-bitnami-compat pkg:apk/chainguard/postgresql-15-client pkg:apk/chainguard/postgresql-15-client-base pkg:apk/chainguard/postgresql-15-contrib pkg:apk/chainguard/postgresql-15-dev pkg:apk/chainguard/postgresql-15-oci-entrypoint pkg:apk/chainguard/postgresql-15-oci-entrypoint-base pkg:apk/chainguard/postgresql-15-pgadmin-compat pkg:apk/chainguard/postgresql-16 pkg:apk/chainguard/postgresql-16-base pkg:apk/chainguard/postgresql-16-client pkg:apk/chainguard/postgresql-16-client-base pkg:apk/chainguard/postgresql-16-contrib pkg:apk/chainguard/postgresql-16-dev pkg:apk/chainguard/postgresql-16-oci-entrypoint pkg:apk/chainguard/postgresql-16-oci-entrypoint-base pkg:apk/chainguard/postgresql-16-pgadmin-compat pkg:apk/chainguard/postgresql-17 pkg:apk/chainguard/postgresql-17-base pkg:apk/chainguard/postgresql-17-client pkg:apk/chainguard/postgresql-17-client-base pkg:apk/chainguard/postgresql-17-contrib pkg:apk/chainguard/postgresql-17-dev pkg:apk/chainguard/postgresql-17-oci-entrypoint pkg:apk/chainguard/postgresql-17-oci-entrypoint-base pkg:apk/chainguard/postgresql-17-pgadmin-compat pkg:apk/chainguard/postgresql-18 pkg:apk/chainguard/postgresql-18-base pkg:apk/chainguard/postgresql-18-client pkg:apk/chainguard/postgresql-18-client-base pkg:apk/chainguard/postgresql-18-contrib pkg:apk/chainguard/postgresql-18-dev pkg:apk/chainguard/postgresql-18-oci-entrypoint pkg:apk/chainguard/postgresql-18-oci-entrypoint-base pkg:apk/chainguard/postgresql-18-pgadmin-compat pkg:apk/chainguard/py3.10-plpython pkg:apk/chainguard/py3.10-plpython-17 pkg:apk/chainguard/py3.10-plpython-18 pkg:apk/chainguard/py3.11-plpython pkg:apk/chainguard/py3.11-plpython-17 pkg:apk/chainguard/py3.11-plpython-18 pkg:apk/chainguard/py3.12-plpython pkg:apk/chainguard/py3.12-plpython-17 pkg:apk/chainguard/py3.12-plpython-18 pkg:apk/chainguard/py3.13-plpython pkg:apk/chainguard/py3.13-plpython-17 pkg:apk/chainguard/py3.13-plpython-18 pkg:apk/wolfi/ecpg-16 pkg:apk/wolfi/ecpg-17 pkg:apk/wolfi/ecpg-18 pkg:apk/wolfi/libecpg-12 pkg:apk/wolfi/libecpg-13 pkg:apk/wolfi/libecpg-14 pkg:apk/wolfi/libecpg-15 pkg:apk/wolfi/libecpg-16 pkg:apk/wolfi/libecpg-16-dev pkg:apk/wolfi/libecpg-17 pkg:apk/wolfi/libecpg-17-dev pkg:apk/wolfi/libecpg-18 pkg:apk/wolfi/libecpg-18-dev pkg:apk/wolfi/libpq-11 pkg:apk/wolfi/libpq-12 pkg:apk/wolfi/libpq-13 pkg:apk/wolfi/libpq-14 pkg:apk/wolfi/libpq-15 pkg:apk/wolfi/libpq-16 pkg:apk/wolfi/libpq-17 pkg:apk/wolfi/libpq-18 pkg:apk/wolfi/neon pkg:apk/wolfi/postgresql-11 pkg:apk/wolfi/postgresql-11-bitnami-compat pkg:apk/wolfi/postgresql-11-client pkg:apk/wolfi/postgresql-11-contrib pkg:apk/wolfi/postgresql-11-dev pkg:apk/wolfi/postgresql-11-oci-entrypoint pkg:apk/wolfi/postgresql-12 pkg:apk/wolfi/postgresql-12-base pkg:apk/wolfi/postgresql-12-bitnami-compat pkg:apk/wolfi/postgresql-12-client pkg:apk/wolfi/postgresql-12-client-base pkg:apk/wolfi/postgresql-12-contrib pkg:apk/wolfi/postgresql-12-dev pkg:apk/wolfi/postgresql-12-oci-entrypoint pkg:apk/wolfi/postgresql-12-oci-entrypoint-base pkg:apk/wolfi/postgresql-13 pkg:apk/wolfi/postgresql-13-base pkg:apk/wolfi/postgresql-13-bitnami-compat pkg:apk/wolfi/postgresql-13-client pkg:apk/wolfi/postgresql-13-client-base pkg:apk/wolfi/postgresql-13-contrib pkg:apk/wolfi/postgresql-13-dev pkg:apk/wolfi/postgresql-13-oci-entrypoint pkg:apk/wolfi/postgresql-13-oci-entrypoint-base pkg:apk/wolfi/postgresql-14 pkg:apk/wolfi/postgresql-14-base pkg:apk/wolfi/postgresql-14-bitnami-compat pkg:apk/wolfi/postgresql-14-client pkg:apk/wolfi/postgresql-14-client-base pkg:apk/wolfi/postgresql-14-contrib pkg:apk/wolfi/postgresql-14-dev pkg:apk/wolfi/postgresql-14-oci-entrypoint pkg:apk/wolfi/postgresql-14-oci-entrypoint-base pkg:apk/wolfi/postgresql-15 pkg:apk/wolfi/postgresql-15-base pkg:apk/wolfi/postgresql-15-bitnami-compat pkg:apk/wolfi/postgresql-15-client pkg:apk/wolfi/postgresql-15-client-base pkg:apk/wolfi/postgresql-15-contrib pkg:apk/wolfi/postgresql-15-dev pkg:apk/wolfi/postgresql-15-oci-entrypoint pkg:apk/wolfi/postgresql-15-oci-entrypoint-base pkg:apk/wolfi/postgresql-16 pkg:apk/wolfi/postgresql-16-base pkg:apk/wolfi/postgresql-16-client pkg:apk/wolfi/postgresql-16-client-base pkg:apk/wolfi/postgresql-16-contrib pkg:apk/wolfi/postgresql-16-dev pkg:apk/wolfi/postgresql-16-oci-entrypoint pkg:apk/wolfi/postgresql-16-oci-entrypoint-base pkg:apk/wolfi/postgresql-16-pgadmin-compat pkg:apk/wolfi/postgresql-17 pkg:apk/wolfi/postgresql-17-base pkg:apk/wolfi/postgresql-17-client pkg:apk/wolfi/postgresql-17-client-base pkg:apk/wolfi/postgresql-17-contrib pkg:apk/wolfi/postgresql-17-dev pkg:apk/wolfi/postgresql-17-oci-entrypoint pkg:apk/wolfi/postgresql-17-oci-entrypoint-base pkg:apk/wolfi/postgresql-17-pgadmin-compat pkg:apk/wolfi/postgresql-18 pkg:apk/wolfi/postgresql-18-base pkg:apk/wolfi/postgresql-18-client pkg:apk/wolfi/postgresql-18-client-base pkg:apk/wolfi/postgresql-18-contrib pkg:apk/wolfi/postgresql-18-dev pkg:apk/wolfi/postgresql-18-oci-entrypoint pkg:apk/wolfi/postgresql-18-oci-entrypoint-base pkg:apk/wolfi/postgresql-18-pgadmin-compat pkg:apk/wolfi/py3.10-plpython pkg:apk/wolfi/py3.10-plpython-17 pkg:apk/wolfi/py3.10-plpython-18 pkg:apk/wolfi/py3.11-plpython pkg:apk/wolfi/py3.11-plpython-17 pkg:apk/wolfi/py3.11-plpython-18 pkg:apk/wolfi/py3.12-plpython pkg:apk/wolfi/py3.12-plpython-17 pkg:apk/wolfi/py3.12-plpython-18 pkg:apk/wolfi/py3.13-plpython pkg:apk/wolfi/py3.13-plpython-17 pkg:apk/wolfi/py3.13-plpython-18
< 13.20-r0+ 215 more
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 13.23-r2
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 14.20-r2
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 13.23-r2
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 13.20-r0
- (no CPE)range: < 14.20-r2
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 14.17-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 18.1-r0

Patches

Vulnerability mechanics

References

metadata.ftp-master.debian.org/changelogs/main/p/postgresql-common/postgresql-common_181+deb9u1_changelognvdBroken LinkIssue TrackingThird Party Advisory
www.securityfocus.com/bid/101810nvdBroken LinkThird Party AdvisoryVDB Entry
usn.ubuntu.com/usn/usn-3476-1/nvdIssue TrackingThird Party Advisory
www.debian.org/security/2017/dsa-4029nvdIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000