A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.
CVSS Details
- CVSS 3.1 Base Score: 2.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-pltclUpgrade postgresql-private-libsUpgrade postgresql-serverUpgrade pg_repackUpgrade postgresql-test-rpm-macrosUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-private-develUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-upgradeUpgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresql-server-develUpgrade pgauditUpgrade postgresql-plpython3 | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql14Upgrade postgresql12Upgrade postgresql16 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-private-develUpgrade postgresql-plpython3Upgrade postgresql-staticUpgrade postgresql-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-llvmjitUpgrade postgresql-plpython2Upgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-plperl | Jan 23, 2024 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-contribUpgrade postgresql15-private-develUpgrade postgresql15-staticUpgrade postgresql15-server-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-upgrade-develUpgrade postgresql15-plpython3Upgrade postgresql15-private-libsUpgrade postgresql15-serverUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-debugsourceUpgrade postgresql15-pltclUpgrade postgresql15-plperlUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-testUpgrade postgresql15-debuginfoUpgrade postgresql15Upgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-pltcl-debuginfo | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresqlUpgrade postgresql-plperlUpgrade pg_repack-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade pgauditUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-test-debuginfoUpgrade postgresql-staticUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade pg_repackUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-develUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-private-libsUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-debuginfoUpgrade pg_repack-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-serverUpgrade postgresql-test | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-devel | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade pgauditUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql-testUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-docs | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 16.1Upgrade to PostgreSQL version 14.10Upgrade to PostgreSQL version 15.5 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade pgaudit-debuginfoUpgrade postgresql-plperlUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-testUpgrade postgresql-server-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-docsUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-test-debuginfoUpgrade postgresql-serverUpgrade pg_repackUpgrade pgaudit-debugsourceUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-server-devel-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-test-rpm-macrosUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade pg_repack-debuginfoUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-contrib-debuginfoUpgrade postgresql-private-develUpgrade postgresql-private-libs-debuginfoUpgrade pgauditUpgrade postgresql-debuginfoNo solution existsUpgrade postgresql-upgradeUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfo | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgresql-docs-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-pltcl-debuginfoUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql-upgradeUpgrade pg_repack-debuginfoUpgrade postgresqlUpgrade postgresql-server-develUpgrade postgresql-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql-testUpgrade pgaudit-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-contribUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-develUpgrade pgauditUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade pg_repack-debugsourceUpgrade pgaudit-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-test-debuginfo | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql12-plperlUpgrade libecpg6Upgrade postgresql13-server-develUpgrade postgresql15-testUpgrade postgresql15-develUpgrade postgresql-plpythonUpgrade postgresql15-contribUpgrade postgresql15-server-develUpgrade postgresql-server-develUpgrade postgresql15-docsUpgrade postgresql16-plpythonUpgrade postgresql16Upgrade postgresqlUpgrade postgresql14-docsUpgrade postgresql15-serverUpgrade postgresql12-llvmjitUpgrade postgresql-pltclUpgrade postgresql12-server-develUpgrade postgresql12-plpythonUpgrade postgresql14-llvmjit-develUpgrade postgresql14-testUpgrade postgresql13-contribUpgrade postgresql-contribUpgrade postgresql-llvmjitUpgrade postgresql12-llvmjit-develUpgrade postgresql14Upgrade postgresql16-llvmjitUpgrade postgresql13-llvmjit-develUpgrade postgresql14-pltclUpgrade postgresql16-pltclUpgrade postgresql-llvmjit-develUpgrade postgresql12-develUpgrade postgresql16-develUpgrade postgresql14-server-develUpgrade postgresql13-pltclUpgrade postgresql15-plperlUpgrade postgresql12-testUpgrade postgresql-serverUpgrade postgresql14-plpythonUpgrade postgresql-testUpgrade postgresql14-contribUpgrade postgresql16-devel-miniUpgrade postgresql16-contribUpgrade postgresql15-llvmjitUpgrade postgresql12-docsUpgrade libpq5Upgrade postgresql16-testUpgrade postgresql13Upgrade postgresql12-serverUpgrade postgresql12-pltclUpgrade postgresql14-plperlUpgrade postgresql13-testUpgrade postgresql14-llvmjitUpgrade postgresql-docsUpgrade postgresql16-plperlUpgrade postgresql13-develUpgrade libpq5-32bitUpgrade postgresql16-docsUpgrade postgresql15-llvmjit-develUpgrade postgresql13-docsUpgrade postgresql12-contribUpgrade postgresql16-serverUpgrade postgresql13-llvmjitUpgrade postgresql15Upgrade postgresql12Upgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql13-serverUpgrade postgresql14-serverUpgrade postgresql16-llvmjit-develUpgrade postgresql14-develUpgrade postgresql13-plperlUpgrade postgresql15-pltclUpgrade postgresql16-server-develUpgrade postgresql15-plpythonUpgrade libecpg6-32bitUpgrade postgresql13-plpython | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-client-12Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-client-14Upgrade postgresql-client-15Upgrade postgresql-15Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-14Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-12 | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub