description: The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation.
problem types: Insufficient drop of privileges
affected:
{
product: postgresql-common (Debian-specific Postgres management tools)
vendor: n/a
versions:
status: affected, version: Versions before 210
}