A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.
CVSS Details
- CVSS 3.1 Base Score: 2.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-contribUpgrade postgresql-private-develUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-plpython3Upgrade postgresql-staticUpgrade postgresql-upgrade-develUpgrade postgresql-test-rpm-macrosUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgresql-test | Dec 5, 2023 | Nov 29, 2023 |
| Alpine Linux | — | Upgrade postgresql16Upgrade postgresql12Upgrade postgresql15Upgrade postgresql14 | Mar 26, 2024 | Dec 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3Upgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plpython2Upgrade postgresql-server-develUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-contribUpgrade postgresql-llvmjit | Jan 23, 2024 | Dec 10, 2023 |
| Amazon_linux_2023 | — | Upgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql15-test-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15Upgrade postgresql15-docs-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15-private-develUpgrade postgresql15-contribUpgrade postgresql15-docsUpgrade postgresql15-server-develUpgrade postgresql15-plperlUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-testUpgrade postgresql15-pltclUpgrade postgresql15-debugsourceUpgrade postgresql15-staticUpgrade postgresql15-server-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-plpython3Upgrade postgresql15-upgrade-develUpgrade postgresql15-serverUpgrade postgresql15-private-libs | Feb 17, 2025 | Nov 9, 2023 |
| Centos_linux | — | Upgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade pgaudit-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-pltclUpgrade postgresql-debugsourceUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-private-libsUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-staticUpgrade postgresql-docsUpgrade pgauditUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-plperlUpgrade postgresql-test-debuginfoUpgrade postgres-decoderbufsUpgrade pg_repack-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade pg_repackUpgrade postgresql-private-develUpgrade postgresql-pltcl-debuginfo | Nov 30, 2023 | Nov 30, 2023 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-13 | Nov 20, 2023 | Nov 20, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Nov 9, 2023 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Aug 8, 2024 | Dec 10, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-devel | Mar 13, 2024 | Dec 10, 2023 |
| Oracle_linux | — | Upgrade postgresql-upgrade-develUpgrade postgresql-private-libsUpgrade postgres-decoderbufsUpgrade postgresql-private-develUpgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade pgauditUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade pg_repackUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-testUpgrade postgresql-staticUpgrade postgresql-pltcl | Dec 14, 2023 | Nov 9, 2023 |
| Postgres | — | Upgrade to PostgreSQL version 15.5Upgrade to the latest version of PostgreSQLUpgrade to PostgreSQL version 14.10Upgrade to PostgreSQL version 16.1 | Dec 10, 2023 | Dec 10, 2023 |
| Redhat_linux | — | Upgrade pg_repackUpgrade postgres-decoderbufs-debugsourceUpgrade postgresqlUpgrade postgresql-test-debuginfoUpgrade postgresql-docsUpgrade postgresql-docs-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade pgaudit-debugsourceUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-debugsourceUpgrade postgresql-private-libsUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-server-develUpgrade postgresql-staticUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-contribUpgrade pg_repack-debugsourceUpgrade postgresql-plpython3Upgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade pg_repack-debuginfoNo solution existsUpgrade postgresql-upgradeUpgrade pgauditUpgrade postgresql-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-private-develUpgrade postgres-decoderbufs-debuginfo | Nov 29, 2023 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade postgresql-upgradeUpgrade pg_repack-debuginfoUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-develUpgrade postgresql-testUpgrade pgaudit-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-plpython3-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade pg_repack-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docsUpgrade postgresql-test-debuginfoUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade pgaudit-debugsourceUpgrade postgresql-staticUpgrade postgresql-plperl-debuginfoUpgrade postgres-decoderbufs-debuginfo | Mar 5, 2024 | Dec 10, 2023 |
| Suse | — | Upgrade postgresql13-develUpgrade postgresql16-plperlUpgrade postgresql-serverUpgrade postgresql14-llvmjitUpgrade postgresql14-develUpgrade postgresql16-contribUpgrade postgresql15Upgrade postgresql16-serverUpgrade postgresql13-llvmjitUpgrade postgresql-develUpgrade postgresql15-plpythonUpgrade postgresql12-pltclUpgrade postgresql15-llvmjitUpgrade postgresql13-plpythonUpgrade postgresql16-docsUpgrade postgresql-testUpgrade postgresql13-serverUpgrade postgresql14-serverUpgrade postgresql15-pltclUpgrade postgresql16-llvmjit-develUpgrade postgresql13-plperlUpgrade postgresql12-contribUpgrade postgresql12-docsUpgrade postgresql-docsUpgrade postgresql14-contribUpgrade libecpg6-32bitUpgrade postgresql13Upgrade postgresql14-plpythonUpgrade postgresql16-server-develUpgrade libpq5Upgrade postgresql-plperlUpgrade postgresql13-docsUpgrade postgresql16-devel-miniUpgrade postgresql16-testUpgrade postgresql15-llvmjit-develUpgrade postgresql12-serverUpgrade postgresql12Upgrade postgresql13-testUpgrade libpq5-32bitUpgrade postgresql14-plperlUpgrade postgresql15-develUpgrade postgresql15-docsUpgrade postgresql13-server-develUpgrade postgresql13-llvmjit-develUpgrade postgresql-contribUpgrade postgresql13-contribUpgrade postgresql14-testUpgrade postgresql16-llvmjitUpgrade postgresql12-llvmjit-develUpgrade postgresql14-pltclUpgrade postgresql14-llvmjit-develUpgrade postgresql15-testUpgrade libecpg6Upgrade postgresql-llvmjitUpgrade postgresql12-plperlUpgrade postgresql-plpythonUpgrade postgresql16-pltclUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-llvmjit-develUpgrade postgresql14Upgrade postgresql12-server-develUpgrade postgresql12-plpythonUpgrade postgresql16-develUpgrade postgresql12-testUpgrade postgresql-server-develUpgrade postgresql15-server-develUpgrade postgresql15-contribUpgrade postgresql14-docsUpgrade postgresql12-llvmjitUpgrade postgresql16Upgrade postgresql12-develUpgrade postgresql15-plperlUpgrade postgresql14-server-develUpgrade postgresql13-pltclUpgrade postgresql15-serverUpgrade postgresql16-plpython | Nov 14, 2023 | Nov 13, 2023 |
| Ubuntu | — | Upgrade postgresql-client-10 (Ubuntu Pro)Upgrade postgresql-client-14Upgrade postgresql-client-15Upgrade postgresql-client-12Upgrade postgresql-client-9.5 (Ubuntu Pro)Upgrade postgresql-15Upgrade postgresql-10 (Ubuntu Pro)Upgrade postgresql-9.5 (Ubuntu Pro)Upgrade postgresql-14Upgrade postgresql-12 | Dec 7, 2023 | Dec 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub