{ "schemaVersion": 1, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "record": { "id": "CVE-2023-5870", "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2023-5870", "idYear": 2023, "status": "PUBLISHED", "publishedAt": "2023-12-10T17:58:30.213Z", "updatedAt": "2026-03-02T17:25:57.356Z", "importedAt": "2026-10-24T01:57:03.413Z", "snapshot": { "id": "cve_2026-10-24_midnight_baseline", "at": "2026-10-24T00:00:00.000Z", "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z" }, "facts": { "title": "Postgresql: role pg_signal_backend can signal certain superuser processes.", "summary": "A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.", "affected": [ { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Security 4.2", "packageName": "advanced-cluster-security/rhacs-central-db-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "4.2.4-6", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Security 4.2", "packageName": "advanced-cluster-security/rhacs-main-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "4.2.4-6", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Security 4.2", "packageName": "advanced-cluster-security/rhacs-operator-bundle", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "4.2.4-7", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Security 4.2", "packageName": "advanced-cluster-security/rhacs-scanner-db-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "4.2.4-6", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Security 4.2", "packageName": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "4.2.4-7", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "postgresql:13", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8090020231114113712.a75119d5", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "postgresql:12", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8090020231128173330.a75119d5", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "postgresql:15", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8090020231114113548.a75119d5", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support", "packageName": "postgresql:12", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8020020231128165246.4cda2c84", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.2 Telecommunications Update Service", "packageName": "postgresql:12", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8020020231128165246.4cda2c84", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions", "packageName": "postgresql:12", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8020020231128165246.4cda2c84", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support", "packageName": "postgresql:12", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8040020231127153301.522a0ee4", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support", "packageName": "postgresql:13", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8040020231127154806.522a0ee4", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service", "packageName": "postgresql:12", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8040020231127153301.522a0ee4", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service", "packageName": "postgresql:13", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8040020231127154806.522a0ee4", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions", "packageName": "postgresql:12", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8040020231127153301.522a0ee4", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions", "packageName": "postgresql:13", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8040020231127154806.522a0ee4", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.6 Extended Update Support", "packageName": "postgresql:13", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8060020231114115246.ad008a3a", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.6 Extended Update Support", "packageName": "postgresql:12", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8060020231128165328.ad008a3a", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.8 Extended Update Support", "packageName": "postgresql:13", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8080020231114105206.63b34585", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.8 Extended Update Support", "packageName": "postgresql:12", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8080020231128165335.63b34585", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.8 Extended Update Support", "packageName": "postgresql:15", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "8080020231113134015.63b34585", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "postgresql", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "0:13.13-1.el9_3", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "postgresql:15", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "9030020231120082734.rhel9", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9.0 Extended Update Support", "packageName": "postgresql", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "0:13.13-1.el9_0", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9.2 Extended Update Support", "packageName": "postgresql", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "0:13.13-1.el9_2", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9.2 Extended Update Support", "packageName": "postgresql:15", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "9020020231115020618.rhel9", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Software Collections for Red Hat Enterprise Linux 7", "packageName": "rh-postgresql12-postgresql", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "0:12.17-1.el7", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Software Collections for Red Hat Enterprise Linux 7", "packageName": "rh-postgresql13-postgresql", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [ { "version": "0:13.13-1.el7", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "RHACS-3.74-RHEL-8", "packageName": "advanced-cluster-security/rhacs-central-db-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "3.74.8-9", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "RHACS-3.74-RHEL-8", "packageName": "advanced-cluster-security/rhacs-main-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "3.74.8-9", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "RHACS-3.74-RHEL-8", "packageName": "advanced-cluster-security/rhacs-operator-bundle", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "3.74.8-7", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "RHACS-3.74-RHEL-8", "packageName": "advanced-cluster-security/rhacs-scanner-db-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "3.74.8-9", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "RHACS-3.74-RHEL-8", "packageName": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "3.74.8-9", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "RHACS-4.1-RHEL-8", "packageName": "advanced-cluster-security/rhacs-central-db-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "4.1.6-6", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "RHACS-4.1-RHEL-8", "packageName": "advanced-cluster-security/rhacs-main-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "4.1.6-6", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "RHACS-4.1-RHEL-8", "packageName": "advanced-cluster-security/rhacs-operator-bundle", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "4.1.6-6", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "RHACS-4.1-RHEL-8", "packageName": "advanced-cluster-security/rhacs-scanner-db-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "4.1.6-6", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "RHACS-4.1-RHEL-8", "packageName": "advanced-cluster-security/rhacs-scanner-db-slim-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected", "versions": [ { "version": "4.1.6-6", "status": "unaffected", "versionType": "rpm", "lessThan": "*" } ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "packageName": "postgresql", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown", "versions": [] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "packageName": "postgresql", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "postgresql:10/postgresql", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "postgresql:16/postgresql", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected", "versions": [] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "postgresql:16/postgresql", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected", "versions": [] }, { "vendor": "Red Hat", "product": "Red Hat Software Collections", "packageName": "rh-postgresql10-postgresql", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected", "versions": [] } ] } } }