CVE-2023-5870

Katalog CVE

CVSS 4.4 · Medium EPSS 2,6%

Kerentanan Uncontrolled Resource Consumption pada postgresql, redhat codeready linux builder eus +14 lainnya. Skor CVSS 3.1 4.4 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.

Rincian

Terbit di NVD

10 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

2,6% peluang dieksploitasi; lebih tinggi dari 84,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.postgresql.org/support/security/CVE-2023-5870/ advisory vendor
• https://access.redhat.com/errata/RHSA-2023:7545 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7579 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7580 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7581 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7616 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7656 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7666 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7667 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7694 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7695 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7714 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7770 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7772 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2023-5870 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7784
• https://access.redhat.com/errata/RHSA-2023:7785
• https://access.redhat.com/errata/RHSA-2023:7883
• https://access.redhat.com/errata/RHSA-2023:7884
• https://access.redhat.com/errata/RHSA-2023:7885
• https://access.redhat.com/errata/RHSA-2024:0304
• https://access.redhat.com/errata/RHSA-2024:0332
• https://access.redhat.com/errata/RHSA-2024:0337
• https://bugzilla.redhat.com/show_bug.cgi?id=2247170 issue tracking
• https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/ release notes