A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.
CVSS Details
- CVSS 3.1 Base Score: 2.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-staticUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade pgauditUpgrade postgresql-private-develUpgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-private-libsUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-docsUpgrade postgresql-test-rpm-macros | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql14Upgrade postgresql12Upgrade postgresql16 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-private-develUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-plpython2Upgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-llvmjitUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-server | Jan 23, 2024 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-contribUpgrade postgresql15-private-libsUpgrade postgresql15-pltclUpgrade postgresql15-testUpgrade postgresql15-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-debugsourceUpgrade postgresql15-upgrade-develUpgrade postgresql15-serverUpgrade postgresql15-plperlUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-plpython3Upgrade postgresql15-docs-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-server-debuginfoUpgrade postgresql15-staticUpgrade postgresql15-private-develUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-upgradeUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15Upgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-private-libs-debuginfo | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-private-libs-debuginfoUpgrade postgresql-staticUpgrade pg_repack-debugsourceUpgrade postgresql-plperlUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade pg_repackUpgrade postgresql-private-develUpgrade postgresqlUpgrade pgauditUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-contrib-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade pgaudit-debuginfoUpgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade postgresql-server-develUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-private-libsUpgrade postgresql-serverUpgrade postgresql-upgrade-develUpgrade pgaudit-debugsource | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-docsUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-contrib | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-testUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-private-libsUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgres-decoderbufsUpgrade postgresql-private-develUpgrade postgresql-upgrade | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 16.1Upgrade to PostgreSQL version 14.10Upgrade to PostgreSQL version 15.5 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade postgresql-docs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-plperlUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repackUpgrade postgresql-private-libsUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-serverUpgrade pgaudit-debugsourceUpgrade postgresqlUpgrade postgresql-upgradeUpgrade pgauditUpgrade postgres-decoderbufsNo solution existsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade pg_repack-debuginfoUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-private-devel | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgresql-server-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresqlUpgrade postgresql-debuginfoUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade pg_repackUpgrade postgresql-debugsourceUpgrade postgresql-testUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-upgradeUpgrade pg_repack-debugsourceUpgrade postgresql-pltclUpgrade pgauditUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-server-devel-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-staticUpgrade postgresql-test-debuginfoUpgrade postgresql-docsUpgrade postgresql-contrib | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql13-server-develUpgrade postgresql15-develUpgrade postgresql16-plpythonUpgrade postgresql12-plperlUpgrade postgresql14-testUpgrade postgresql16-develUpgrade postgresql15-testUpgrade postgresql15-docsUpgrade postgresql12-llvmjit-develUpgrade postgresql14-pltclUpgrade postgresql14-llvmjit-develUpgrade postgresql-plpythonUpgrade postgresql12-server-develUpgrade postgresql14Upgrade postgresql12-plpythonUpgrade postgresql16-pltclUpgrade postgresql-pltclUpgrade postgresql16-llvmjitUpgrade postgresql-llvmjit-develUpgrade postgresqlUpgrade postgresql16Upgrade libecpg6Upgrade postgresql13-llvmjit-develUpgrade postgresql12-testUpgrade postgresql15-server-develUpgrade postgresql12-llvmjitUpgrade postgresql14-docsUpgrade postgresql-contribUpgrade postgresql13-pltclUpgrade postgresql12-develUpgrade postgresql15-plperlUpgrade postgresql-server-develUpgrade postgresql14-server-develUpgrade postgresql15-contribUpgrade postgresql15-serverUpgrade postgresql-llvmjitUpgrade postgresql13-contribUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql16-plperlUpgrade postgresql-plperlUpgrade postgresql14-plperlUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql13-serverUpgrade libpq5-32bitUpgrade postgresql12-contribUpgrade postgresql14-contribUpgrade postgresql15Upgrade postgresql16-serverUpgrade postgresql15-llvmjit-develUpgrade postgresql16-docsUpgrade postgresql13-testUpgrade postgresql13-docsUpgrade postgresql16-testUpgrade postgresql13Upgrade postgresql15-llvmjitUpgrade postgresql14-llvmjitUpgrade postgresql13-llvmjitUpgrade postgresql12Upgrade libecpg6-32bitUpgrade postgresql15-pltclUpgrade postgresql16-contribUpgrade postgresql14-develUpgrade postgresql13-plperlUpgrade postgresql16-llvmjit-develUpgrade postgresql16-server-develUpgrade postgresql16-devel-miniUpgrade postgresql15-plpythonUpgrade postgresql13-plpythonUpgrade postgresql14-serverUpgrade postgresql12-docsUpgrade libpq5Upgrade postgresql14-plpythonUpgrade postgresql12-serverUpgrade postgresql12-pltclUpgrade postgresql13-devel | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-14Upgrade postgresql-12Upgrade postgresql-client-12Upgrade postgresql-client-15Upgrade postgresql-15Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-client-14Upgrade postgresql-client-9.5 (Ubuntu Pro) | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub