A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.
CVSS Details
- CVSS 3.1 Base Score: 2.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-server-develUpgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade pgauditUpgrade postgresql-private-develUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade pg_repackUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-private-libsUpgrade postgresql-serverUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docs | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql14Upgrade postgresql12Upgrade postgresql16 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-server-develUpgrade postgresql-llvmjitUpgrade postgresql-plpython2Upgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-upgradeUpgrade postgresql-docsUpgrade postgresql-plpython3Upgrade postgresql-staticUpgrade postgresql-private-libsUpgrade postgresql-debuginfoUpgrade postgresql-private-develUpgrade postgresql-upgrade-devel | Jan 23, 2024 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-contrib-debuginfoUpgrade postgresql15-test-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15Upgrade postgresql15-upgradeUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-contribUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-pltclUpgrade postgresql15-plperlUpgrade postgresql15-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-testUpgrade postgresql15-debugsourceUpgrade postgresql15-private-develUpgrade postgresql15-server-debuginfoUpgrade postgresql15-docsUpgrade postgresql15-staticUpgrade postgresql15-plpython3Upgrade postgresql15-upgrade-develUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-server | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-server-devel-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-libsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-serverUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-testUpgrade postgresql-server-develUpgrade postgresql-server-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docsUpgrade pgauditUpgrade postgresql-plperl-debuginfoUpgrade pg_repackUpgrade postgresql-private-develUpgrade pg_repack-debugsourceUpgrade postgresqlUpgrade postgresql-contribUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-plperlUpgrade postgresql-static | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-13Upgrade postgresql-15 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-devel | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-serverUpgrade pg_repackUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-testUpgrade postgresqlUpgrade pgauditUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgres-decoderbufsUpgrade postgresql-private-develUpgrade postgresql-upgradeUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3 | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 15.5Upgrade to PostgreSQL version 14.10Upgrade to PostgreSQL version 16.1 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade postgresql-plpython3-debuginfoUpgrade postgresql-serverUpgrade pg_repackUpgrade postgresql-testUpgrade pgaudit-debugsourceUpgrade postgresql-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-plperlUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresqlUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-server-debuginfoUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-contribUpgrade postgresql-upgradeNo solution existsUpgrade postgresql-server-develUpgrade pg_repack-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-private-develUpgrade postgresql-plpython3Upgrade postgresql-plperl-debuginfoUpgrade pg_repack-debuginfoUpgrade pgauditUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-debugsourceUpgrade postgresql-testUpgrade pgaudit-debuginfoUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgresql-serverUpgrade postgresql-plperlUpgrade pg_repack-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade pg_repackUpgrade postgresql-server-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresqlUpgrade postgresql-test-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pgauditUpgrade pg_repack-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-contribUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade pgaudit-debugsourceUpgrade postgresql-staticUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-pltclUpgrade postgresql-contrib-debuginfo | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql14-server-develUpgrade postgresql15-plperlUpgrade postgresql13-llvmjit-develUpgrade postgresql13-server-develUpgrade postgresql13-pltclUpgrade libecpg6Upgrade postgresql12-develUpgrade postgresql15-develUpgrade postgresql15-serverUpgrade postgresql14-docsUpgrade postgresql12-plperlUpgrade postgresql12-llvmjitUpgrade postgresql-plpythonUpgrade postgresql15-contribUpgrade postgresql15-server-develUpgrade postgresql16Upgrade postgresql15-docsUpgrade postgresqlUpgrade postgresql-llvmjit-develUpgrade postgresql16-pltclUpgrade postgresql-contribUpgrade postgresql14Upgrade postgresql16-llvmjitUpgrade postgresql-server-develUpgrade postgresql12-testUpgrade postgresql15-testUpgrade postgresql16-plpythonUpgrade postgresql-pltclUpgrade postgresql12-plpythonUpgrade postgresql12-llvmjit-develUpgrade postgresql14-pltclUpgrade postgresql12-server-develUpgrade postgresql16-develUpgrade postgresql14-testUpgrade postgresql-llvmjitUpgrade postgresql14-llvmjit-develUpgrade postgresql13-contribUpgrade postgresql-develUpgrade libpq5-32bitUpgrade postgresql12-docsUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql12-contribUpgrade postgresql14-contribUpgrade postgresql14-serverUpgrade libecpg6-32bitUpgrade postgresql16-serverUpgrade postgresql15Upgrade postgresql12Upgrade postgresql12-pltclUpgrade postgresql16-contribUpgrade postgresql16-plperlUpgrade postgresql14-llvmjitUpgrade postgresql-docsUpgrade postgresql13-develUpgrade postgresql15-llvmjitUpgrade postgresql16-testUpgrade postgresql16-server-develUpgrade postgresql16-devel-miniUpgrade postgresql15-plpythonUpgrade libpq5Upgrade postgresql14-plpythonUpgrade postgresql13Upgrade postgresql12-serverUpgrade postgresql16-llvmjit-develUpgrade postgresql16-docsUpgrade postgresql13-llvmjitUpgrade postgresql13-plpythonUpgrade postgresql15-pltclUpgrade postgresql14-develUpgrade postgresql13-plperlUpgrade postgresql13-serverUpgrade postgresql13-testUpgrade postgresql15-llvmjit-develUpgrade postgresql14-plperlUpgrade postgresql13-docsUpgrade postgresql-test | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-client-15Upgrade postgresql-client-12Upgrade postgresql-15Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-client-14Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-12Upgrade postgresql-14Upgrade postgresql-9.5 (Ubuntu Pro) | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub