A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.
CVSS Details
- CVSS 3.1 Base Score: 2.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-contribUpgrade postgresql-upgradeUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-private-libsUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade pg_repack | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql16Upgrade postgresql12Upgrade postgresql15Upgrade postgresql14 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-staticUpgrade postgresql-private-develUpgrade postgresql-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-llvmjitUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython2 | Jan 23, 2024 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-pltclUpgrade postgresql15-debugsourceUpgrade postgresql15-plpython3Upgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-testUpgrade postgresql15-staticUpgrade postgresql15-private-libsUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-plperlUpgrade postgresql15-upgrade-develUpgrade postgresql15-docsUpgrade postgresql15-server-debuginfoUpgrade postgresql15-contribUpgrade postgresql15-serverUpgrade postgresql15-private-develUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15Upgrade postgresql15-upgradeUpgrade postgresql15-plpython3-debuginfo | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-private-libsUpgrade pg_repack-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltclUpgrade postgresql-contrib-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgradeUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-private-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade pgauditUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-docs | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-staticUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-private-libsUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-server-devel | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 15.5Upgrade to PostgreSQL version 16.1Upgrade to PostgreSQL version 14.10 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade postgresql-upgrade-develUpgrade postgresql-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgradeNo solution existsUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufsUpgrade pgauditUpgrade pg_repack-debugsourceUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-develUpgrade pg_repack-debuginfoUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-plpython3Upgrade postgresql-server-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-private-develUpgrade postgresql-private-libs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-docs-debuginfoUpgrade pg_repackUpgrade postgresql-test-debuginfoUpgrade postgresql-plperlUpgrade postgresql-server-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-serverUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-pltcl | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade pgauditUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgres-decoderbufsUpgrade pg_repack-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade pg_repack-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-upgradeUpgrade postgresqlUpgrade postgresql-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql-server-develUpgrade postgresql-testUpgrade pgaudit-debuginfoUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgresql-server-debuginfo | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql12Upgrade postgresql14-llvmjitUpgrade postgresql16-plperlUpgrade postgresql13-develUpgrade postgresql15Upgrade postgresql16-docsUpgrade postgresql12-contribUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql14-plpythonUpgrade postgresql15-llvmjitUpgrade postgresql-testUpgrade postgresql13-llvmjitUpgrade libecpg6-32bitUpgrade libpq5Upgrade postgresql14-plperlUpgrade postgresql12-docsUpgrade postgresql15-llvmjit-develUpgrade postgresql13-plpythonUpgrade postgresql14-serverUpgrade postgresql12-serverUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade libpq5-32bitUpgrade postgresql13-docsUpgrade postgresql15-pltclUpgrade postgresql13-serverUpgrade postgresql13-testUpgrade postgresql16-testUpgrade postgresql16-devel-miniUpgrade postgresql14-contribUpgrade postgresql15-plpythonUpgrade postgresql16-serverUpgrade postgresql16-llvmjit-develUpgrade postgresql13-plperlUpgrade postgresql16-server-develUpgrade postgresql14-develUpgrade postgresql16-contribUpgrade postgresql12-pltclUpgrade postgresql13Upgrade postgresql13-pltclUpgrade postgresql12-plperlUpgrade postgresql15-docsUpgrade postgresql13-server-develUpgrade postgresql14-server-develUpgrade postgresql12-develUpgrade postgresql15-plperlUpgrade postgresql12-llvmjitUpgrade postgresql16-develUpgrade postgresql12-testUpgrade postgresql-plpythonUpgrade postgresql16Upgrade postgresql-llvmjitUpgrade postgresql13-contribUpgrade postgresql12-llvmjit-develUpgrade postgresql-contribUpgrade postgresql14-pltclUpgrade postgresql14-llvmjit-develUpgrade postgresql14-docsUpgrade postgresql15-contribUpgrade postgresql-server-develUpgrade postgresql15-server-develUpgrade postgresql15-serverUpgrade postgresql14-testUpgrade postgresql15-develUpgrade postgresql16-pltclUpgrade postgresql16-llvmjitUpgrade postgresql14Upgrade postgresql-pltclUpgrade postgresql-llvmjit-develUpgrade postgresqlUpgrade libecpg6Upgrade postgresql12-server-develUpgrade postgresql15-testUpgrade postgresql13-llvmjit-develUpgrade postgresql12-plpythonUpgrade postgresql16-plpython | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-client-12Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-15Upgrade postgresql-client-15Upgrade postgresql-client-14Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-12Upgrade postgresql-14 | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub