CVE-2023-5870

MEDIUM

MEDIUM Priority: 0.11 BB Relevance: 44/100

Published: 2023-12-10 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Network No Interaction

CVSS Vector Breakdown

AV: Network

AC: High

PR: High

UI: None

S: Unchanged

C: None

I: None

A: High

Description

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.

Weakness Classification (1)

CWE-400 — Uncontrolled Resource Consumption

Affected Software (38)

Vendor	Product	Version
postgresql	postgresql	11.0 – 11.22
postgresql	postgresql	16.0
redhat	codeready_linux_builder_eus	9.2
redhat	codeready_linux_builder_eus_for_power_little_endian_eus	9.0_ppc64le
redhat	codeready_linux_builder_eus_for_power_little_endian_eus	9.2_ppc64le
redhat	codeready_linux_builder_for_arm64_eus	8.6_aarch64
redhat	codeready_linux_builder_for_arm64_eus	9.0_aarch64
redhat	codeready_linux_builder_for_arm64_eus	9.2_aarch64
redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.0_s390x
redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.2_s390x
redhat	codeready_linux_builder_for_power_little_endian_eus	9.0_ppc64le
redhat	codeready_linux_builder_for_power_little_endian_eus	9.2_ppc64le
redhat	enterprise_linux	8.0
redhat	enterprise_linux	9.0
redhat	enterprise_linux_eus	8.6
redhat	enterprise_linux_eus	8.8
redhat	enterprise_linux_eus	9.0
redhat	enterprise_linux_eus	9.2
redhat	enterprise_linux_for_arm_64	8.0
redhat	enterprise_linux_for_arm_64	8.8_aarch64
redhat	enterprise_linux_for_ibm_z_systems	8.0_s390x
redhat	enterprise_linux_for_ibm_z_systems_eus	8.6_s390x
redhat	enterprise_linux_for_ibm_z_systems_eus	8.8_s390x
redhat	enterprise_linux_for_ibm_z_systems_eus	9.0_s390x
redhat	enterprise_linux_for_ibm_z_systems_eus	9.2_s390x
redhat	enterprise_linux_for_power_little_endian	8.0_ppc64le
redhat	enterprise_linux_for_power_little_endian_eus	8.6_ppc64le
redhat	enterprise_linux_for_power_little_endian_eus	8.8_ppc64le
redhat	enterprise_linux_for_power_little_endian_eus	9.0_ppc64le
redhat	enterprise_linux_for_power_little_endian_eus	9.2_ppc64le

Showing 30 of 38 entries