A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.
CVSS Details
- CVSS 3.1 Base Score: 2.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-private-libsUpgrade postgresql-docsUpgrade postgresql-serverUpgrade pg_repackUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade pgauditUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade postgresql-private-devel | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql12Upgrade postgresql15Upgrade postgresql14Upgrade postgresql16 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-plpython2Upgrade postgresql-llvmjitUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgresql-plpython3Upgrade postgresql-private-libs | Jan 23, 2024 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15Upgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-contribUpgrade postgresql15-server-debuginfoUpgrade postgresql15-testUpgrade postgresql15-debuginfoUpgrade postgresql15-plperlUpgrade postgresql15-server-develUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-debugsourceUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-pltclUpgrade postgresql15-staticUpgrade postgresql15-private-libsUpgrade postgresql15-plpython3Upgrade postgresql15-upgrade-develUpgrade postgresql15-docsUpgrade postgresql15-private-devel | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repack-debugsourceUpgrade postgres-decoderbufsUpgrade postgresqlUpgrade pg_repackUpgrade postgresql-staticUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docsUpgrade pgauditUpgrade postgresql-test-debuginfoUpgrade postgresql-private-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-upgrade-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-server-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-debugsource | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-docs | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-private-develUpgrade postgresql-private-libsUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-testUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 15.5Upgrade to PostgreSQL version 16.1Upgrade to the latest version of PostgreSQLUpgrade to PostgreSQL version 14.10 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade pgauditUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-plperl-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade postgresql-upgrade-devel-debuginfoNo solution existsUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-contribUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade pg_repack-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade pg_repack-debuginfoUpgrade postgresql-server-develUpgrade pgaudit-debuginfoUpgrade postgresql-serverUpgrade postgresql-private-libsUpgrade postgresqlUpgrade postgresql-docsUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade pgaudit-debugsource | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgresql-staticUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-serverUpgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade pgaudit-debuginfoUpgrade postgresql-testUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3Upgrade pg_repackUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contribUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade pgaudit | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql12-pltclUpgrade postgresql13Upgrade postgresql16-llvmjit-develUpgrade postgresql15-pltclUpgrade postgresql16-contribUpgrade postgresql12-contribUpgrade postgresql14-contribUpgrade postgresql13-serverUpgrade postgresql16-testUpgrade postgresql14-plperlUpgrade postgresql15-llvmjit-develUpgrade postgresql13-testUpgrade postgresql12-serverUpgrade libpq5-32bitUpgrade postgresql-serverUpgrade postgresql16-docsUpgrade postgresql-testUpgrade postgresql16-devel-miniUpgrade postgresql16-server-develUpgrade postgresql13-docsUpgrade postgresql14-plpythonUpgrade postgresql13-plpythonUpgrade postgresql14-llvmjitUpgrade libecpg6-32bitUpgrade postgresql-docsUpgrade postgresql14-serverUpgrade postgresql-develUpgrade postgresql15Upgrade postgresql15-plpythonUpgrade postgresql13-develUpgrade postgresql12Upgrade postgresql15-llvmjitUpgrade postgresql16-serverUpgrade postgresql16-plperlUpgrade postgresql13-llvmjitUpgrade postgresql-plperlUpgrade postgresql12-docsUpgrade postgresql14-develUpgrade libpq5Upgrade postgresql13-plperlUpgrade postgresql-llvmjitUpgrade postgresql12-server-develUpgrade postgresql15-docsUpgrade postgresql-contribUpgrade postgresql-server-develUpgrade postgresql12-llvmjitUpgrade postgresql14-llvmjit-develUpgrade postgresql12-llvmjit-develUpgrade postgresql14Upgrade postgresql16-llvmjitUpgrade postgresql13-server-develUpgrade postgresql13-llvmjit-develUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql14-server-develUpgrade postgresql12-develUpgrade postgresql13-pltclUpgrade postgresql15-plperlUpgrade postgresql16-develUpgrade postgresql12-testUpgrade libecpg6Upgrade postgresql16-pltclUpgrade postgresql12-plpythonUpgrade postgresql16-plpythonUpgrade postgresql15-develUpgrade postgresql-llvmjit-develUpgrade postgresql-plpythonUpgrade postgresql12-plperlUpgrade postgresql15-testUpgrade postgresql15-contribUpgrade postgresql16Upgrade postgresql15-server-develUpgrade postgresql15-serverUpgrade postgresql14-docsUpgrade postgresql14-pltclUpgrade postgresql14-testUpgrade postgresql13-contrib | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-client-15Upgrade postgresql-client-14Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-15Upgrade postgresql-client-12Upgrade postgresql-12Upgrade postgresql-14Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-9.5 (Ubuntu Pro) | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub