Postgresql: role pg_signal_backend can signal certain superuser processes.
Priority LOW 25CWE-400Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- High
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 20 fixed, 4 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-400.
Summary
A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02555 85th percentileScored 2026-11-07
Fix Partial Red Hat: 21 advisoriesRed Hat: 20 fixed, 4 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Red Hat Advanced Cluster Security 4.2 | — | 4.2.4-6 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.2 | — | 4.2.4-6 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.2 | — | 4.2.4-7 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.2 | — | 4.2.4-6 | Patch available | CNA |
| Red Hat | Red Hat Advanced Cluster Security 4.2 | — | 4.2.4-7 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 8090020231114113712.a75119d5 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 8090020231128173330.a75119d5 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 8090020231114113548.a75119d5 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | — | 8020020231128165246.4cda2c84 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.2 Telecommunications Update Service | — | 8020020231128165246.4cda2c84 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | — | 8020020231128165246.4cda2c84 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | 8040020231127153301.522a0ee4 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | 8040020231127154806.522a0ee4 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | — | 8040020231127153301.522a0ee4 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | — | 8040020231127154806.522a0ee4 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | — | 8040020231127153301.522a0ee4 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | — | 8040020231127154806.522a0ee4 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | — | 8060020231114115246.ad008a3a | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | — | 8060020231128165328.ad008a3a | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | — | 8080020231114105206.63b34585 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | — | 8080020231128165335.63b34585 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | — | 8080020231113134015.63b34585 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 13.13-1.el9_3 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 9030020231120082734.rhel9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | — | 13.13-1.el9_0 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | 13.13-1.el9_2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | 9020020231115020618.rhel9 | Patch available | CNA |
| Red Hat | Red Hat Software Collections for Red Hat Enterprise Linux 7 | — | 12.17-1.el7 | Patch available | CNA |
| Red Hat | Red Hat Software Collections for Red Hat Enterprise Linux 7 | — | 13.13-1.el7 | Patch available | CNA |
| Red Hat | RHACS-3.74-RHEL-8 | — | 3.74.8-9 | Patch available | CNA |
| Red Hat | RHACS-3.74-RHEL-8 | — | 3.74.8-9 | Patch available | CNA |
| Red Hat | RHACS-3.74-RHEL-8 | — | 3.74.8-7 | Patch available | CNA |
| Red Hat | RHACS-3.74-RHEL-8 | — | 3.74.8-9 | Patch available | CNA |
| Red Hat | RHACS-3.74-RHEL-8 | — | 3.74.8-9 | Patch available | CNA |
| Red Hat | RHACS-4.1-RHEL-8 | — | 4.1.6-6 | Patch available | CNA |
| Red Hat | RHACS-4.1-RHEL-8 | — | 4.1.6-6 | Patch available | CNA |
| Red Hat | RHACS-4.1-RHEL-8 | — | 4.1.6-6 | Patch available | CNA |
| Red Hat | RHACS-4.1-RHEL-8 | — | 4.1.6-6 | Patch available | CNA |
| Red Hat | RHACS-4.1-RHEL-8 | — | 4.1.6-6 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | Not affected | CNA |
| Red Hat | Red Hat Software Collections | — | — | No fix listed | CNA |
- Red Hat Advanced Cluster Security 4.2 VendorRed Hat Affected — Fixed in 4.2.4-6 Patch available CNA
- Red Hat Advanced Cluster Security 4.2 VendorRed Hat Affected — Fixed in 4.2.4-6 Patch available CNA
- Red Hat Advanced Cluster Security 4.2 VendorRed Hat Affected — Fixed in 4.2.4-7 Patch available CNA
- Red Hat Advanced Cluster Security 4.2 VendorRed Hat Affected — Fixed in 4.2.4-6 Patch available CNA
- Red Hat Advanced Cluster Security 4.2 VendorRed Hat Affected — Fixed in 4.2.4-7 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8090020231114113712.a75119d5 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8090020231128173330.a75119d5 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8090020231114113548.a75119d5 Patch available CNA
- Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 8020020231128165246.4cda2c84 Patch available CNA
- Red Hat Enterprise Linux 8.2 Telecommunications Update Service VendorRed Hat Affected — Fixed in 8020020231128165246.4cda2c84 Patch available CNA
- Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 8020020231128165246.4cda2c84 Patch available CNA
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 8040020231127153301.522a0ee4 Patch available CNA
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 8040020231127154806.522a0ee4 Patch available CNA
- Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 8040020231127153301.522a0ee4 Patch available CNA
- Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 8040020231127154806.522a0ee4 Patch available CNA
- Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 8040020231127153301.522a0ee4 Patch available CNA
- Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 8040020231127154806.522a0ee4 Patch available CNA
- Red Hat Enterprise Linux 8.6 Extended Update Support VendorRed Hat Affected — Fixed in 8060020231114115246.ad008a3a Patch available CNA
- Red Hat Enterprise Linux 8.6 Extended Update Support VendorRed Hat Affected — Fixed in 8060020231128165328.ad008a3a Patch available CNA
- Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 8080020231114105206.63b34585 Patch available CNA
- Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 8080020231128165335.63b34585 Patch available CNA
- Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 8080020231113134015.63b34585 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 13.13-1.el9_3 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 9030020231120082734.rhel9 Patch available CNA
- Red Hat Enterprise Linux 9.0 Extended Update Support VendorRed Hat Affected — Fixed in 13.13-1.el9_0 Patch available CNA
- Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 13.13-1.el9_2 Patch available CNA
- Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 9020020231115020618.rhel9 Patch available CNA
- Red Hat Software Collections for Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in 12.17-1.el7 Patch available CNA
- Red Hat Software Collections for Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in 13.13-1.el7 Patch available CNA
- RHACS-3.74-RHEL-8 VendorRed Hat Affected — Fixed in 3.74.8-9 Patch available CNA
- RHACS-3.74-RHEL-8 VendorRed Hat Affected — Fixed in 3.74.8-9 Patch available CNA
- RHACS-3.74-RHEL-8 VendorRed Hat Affected — Fixed in 3.74.8-7 Patch available CNA
- RHACS-3.74-RHEL-8 VendorRed Hat Affected — Fixed in 3.74.8-9 Patch available CNA
- RHACS-3.74-RHEL-8 VendorRed Hat Affected — Fixed in 3.74.8-9 Patch available CNA
- RHACS-4.1-RHEL-8 VendorRed Hat Affected — Fixed in 4.1.6-6 Patch available CNA
- RHACS-4.1-RHEL-8 VendorRed Hat Affected — Fixed in 4.1.6-6 Patch available CNA
- RHACS-4.1-RHEL-8 VendorRed Hat Affected — Fixed in 4.1.6-6 Patch available CNA
- RHACS-4.1-RHEL-8 VendorRed Hat Affected — Fixed in 4.1.6-6 Patch available CNA
- RHACS-4.1-RHEL-8 VendorRed Hat Affected — Fixed in 4.1.6-6 Patch available CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Software Collections VendorRed Hat Affected — Fixed in — No fix listed CNA
CPE configurations NVD · 38
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* | 11.0 to before 11.22; 12.0 to before 12.17; 13.0 to before 13.13; 14.0 to before 14.10; 15.0 to before 15.5 | Vulnerable | PostgreSQL |
| cpe:2.3:a:postgresql:postgresql:16.0:*:*:*:*:*:*:* | 16.0 | Vulnerable | PostgreSQL |
| cpe:2.3:a:redhat:codeready_linux_builder_eus:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_eus_for_power_little_endian_eus:9.0_ppc64le:*:*:*:*:*:*:* | 9.0_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_eus_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:* | 9.2_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:8.6_aarch64:*:*:*:*:*:*:* | 8.6_aarch64 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.0_aarch64:*:*:*:*:*:*:* | 9.0_aarch64 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.2_aarch64:*:*:*:*:*:*:* | 9.2_aarch64 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.0_s390x:*:*:*:*:*:*:* | 9.0_s390x | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:* | 9.2_s390x | Vulnerable | Red Hat |
- cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* Versions 11.0 to before 11.22; 12.0 to before 12.17; 13.0 to before 13.13; 14.0 to before 14.10; 15.0 to before 15.5 Vulnerable ·PostgreSQL
- cpe:2.3:a:postgresql:postgresql:16.0:*:*:*:*:*:*:* Versions 16.0 Vulnerable ·PostgreSQL
- cpe:2.3:a:redhat:codeready_linux_builder_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_eus_for_power_little_endian_eus:9.0_ppc64le:*:*:*:*:*:*:* Versions 9.0_ppc64le Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_eus_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:* Versions 9.2_ppc64le Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:8.6_aarch64:*:*:*:*:*:*:* Versions 8.6_aarch64 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.0_aarch64:*:*:*:*:*:*:* Versions 9.0_aarch64 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.2_aarch64:*:*:*:*:*:*:* Versions 9.2_aarch64 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.0_s390x:*:*:*:*:*:*:* Versions 9.0_s390x Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:* Versions 9.2_s390x Vulnerable ·Red Hat
Show 28 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.0_ppc64le:*:*:*:*:*:*:* | 9.0_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:* | 9.2_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* | 8.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:* | 8.8 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.8_aarch64:*:*:*:*:*:*:* | 8.8_aarch64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:* | 8.0_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:* | 8.6_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:* | 8.8_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.0_s390x:*:*:*:*:*:*:* | 9.0_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:* | 9.2_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:* | 8.0_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6_ppc64le:*:*:*:*:*:*:* | 8.6_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:* | 8.8_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.0_ppc64le:*:*:*:*:*:*:* | 9.0_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:* | 9.2_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* | 8.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* | 8.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* | 8.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:* | 8.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* | 8.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* | 8.6 | Vulnerable | Red Hat |
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.0_ppc64le:*:*:*:*:*:*:* Versions 9.0_ppc64le Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:* Versions 9.2_ppc64le Vulnerable ·Red Hat
- cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.8_aarch64:*:*:*:*:*:*:* Versions 8.8_aarch64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:* Versions 8.0_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:* Versions 8.6_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:* Versions 8.8_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.0_s390x:*:*:*:*:*:*:* Versions 9.0_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:* Versions 9.2_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:* Versions 8.0_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6_ppc64le:*:*:*:*:*:*:* Versions 8.6_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:* Versions 8.8_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.0_ppc64le:*:*:*:*:*:*:* Versions 9.0_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:* Versions 9.2_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
Remediation
Red Hat 21 advisories
- RHSA-2024:0337 Released 2024-01-22 · Red Hat rating ImportantRHACS 4.2 security update
- RHACS 4.2 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-operator-bundle +2
- RHSA-2024:0332 Released 2024-01-22 · Red Hat rating ImportantACS 4.1 enhancement update
- RHACS 4.1 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-operator-bundle +2
- RHSA-2024:0304 Released 2024-01-18 · Red Hat rating ImportantRHACS 3.74 enhancement and security update
- RHACS 3.74 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-operator-bundle +2
Show 18 more Red Hat advisories
- RHSA-2023:7884 Released 2023-12-20 · Red Hat rating Importantpostgresql:15 security update
- Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.8-1.module+el8.9.0+19797+c4ce5969.aarch64::postgresql:15, pg_repack-1.4.8-1.module+el8.9.0+19797+c4ce5969.ppc64le::postgresql:15, pg_repack-1.4.8-1.module+el8.9.0+19797+c4ce5969.s390x::postgresql:15 +47
- RHSA-2023:7883 Released 2023-12-20 · Red Hat rating Importantpostgresql:15 security update
- Red Hat Enterprise Linux AppStream EUS (v.8.8) pg_repack-1.4.8-1.module+el8.8.0+17071+aaaceaa4.aarch64::postgresql:15, pg_repack-1.4.8-1.module+el8.8.0+17071+aaaceaa4.ppc64le::postgresql:15, pg_repack-1.4.8-1.module+el8.8.0+17071+aaaceaa4.s390x::postgresql:15 +47
- RHSA-2023:7885 Released 2023-12-20 · Red Hat rating Importantpostgresql:15 security update
- Red Hat Enterprise Linux AppStream EUS (v.9.2) pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.aarch64::postgresql:15, pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.ppc64le::postgresql:15, pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.s390x::postgresql:15 +47
- RHSA-2023:7785 Released 2023-12-13 · Red Hat rating Importantpostgresql:15 security update
- Red Hat Enterprise Linux AppStream (v. 9) pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.aarch64::postgresql:15, pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.ppc64le::postgresql:15, pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.s390x::postgresql:15 +47
- RHSA-2023:7784 Released 2023-12-13 · Red Hat rating Importantpostgresql security update
- Red Hat CodeReady Linux Builder (v. 9) postgresql-docs-13.13-1.el9_3, postgresql-private-devel-13.13-1.el9_3, postgresql-server-devel-13.13-1.el9_3 +3
- Red Hat Enterprise Linux AppStream (v. 9) postgresql-13.13-1.el9_3, postgresql-contrib-13.13-1.el9_3, postgresql-plperl-13.13-1.el9_3 +5
- RHSA-2023:7770 Released 2023-12-13 · Red Hat rating Importantrh-postgresql12-postgresql security update
- Red Hat Software Collections for RHEL Workstation(v. 7) rh-postgresql12-postgresql-12.17-1.el7, rh-postgresql12-postgresql-contrib-12.17-1.el7, rh-postgresql12-postgresql-contrib-syspaths-12.17-1.el7 +11
- Red Hat Software Collections for RHEL(v. 7) rh-postgresql12-postgresql-12.17-1.el7, rh-postgresql12-postgresql-contrib-12.17-1.el7, rh-postgresql12-postgresql-contrib-syspaths-12.17-1.el7 +11
- RHSA-2023:7772 Released 2023-12-13 · Red Hat rating Importantrh-postgresql13-postgresql security update
- Red Hat Software Collections for RHEL Workstation(v. 7) rh-postgresql13-postgresql-13.13-1.el7, rh-postgresql13-postgresql-contrib-13.13-1.el7, rh-postgresql13-postgresql-contrib-syspaths-13.13-1.el7 +12
- Red Hat Software Collections for RHEL(v. 7) rh-postgresql13-postgresql-13.13-1.el7, rh-postgresql13-postgresql-contrib-13.13-1.el7, rh-postgresql13-postgresql-contrib-syspaths-13.13-1.el7 +12
- RHSA-2023:7714 Released 2023-12-11 · Red Hat rating Importantpostgresql:12 security update
- Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.aarch64::postgresql:12, pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.ppc64le::postgresql:12, pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.s390x::postgresql:12 +47
- RHSA-2023:7695 Released 2023-12-07 · Red Hat rating Importantpostgresql:13 security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.src::postgresql:13, pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64::postgresql:13, postgres-decoderbufs-0.10.0-2.module+el8.4.0+8873+b821c30a.src::postgresql:13 +15
- Red Hat Enterprise Linux AppStream E4S (v.8.4) pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.aarch64::postgresql:13, pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.ppc64le::postgresql:13, pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.s390x::postgresql:13 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.4) pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.src::postgresql:13, pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64::postgresql:13, postgres-decoderbufs-0.10.0-2.module+el8.4.0+8873+b821c30a.src::postgresql:13 +15
- RHSA-2023:7694 Released 2023-12-07 · Red Hat rating Importantpostgresql:12 security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.src::postgresql:12, pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.x86_64::postgresql:12, postgres-decoderbufs-0.10.0-2.module+el8.4.0+11288+c193d6d7.src::postgresql:12 +15
- Red Hat Enterprise Linux AppStream E4S (v.8.4) pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.aarch64::postgresql:12, pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.ppc64le::postgresql:12, pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.s390x::postgresql:12 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.4) pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.src::postgresql:12, pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.x86_64::postgresql:12, postgres-decoderbufs-0.10.0-2.module+el8.4.0+11288+c193d6d7.src::postgresql:12 +15
- RHSA-2023:7666 Released 2023-12-06 · Red Hat rating Importantpostgresql:12 security update
- Red Hat Enterprise Linux AppStream EUS (v.8.6) pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.aarch64::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.ppc64le::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.s390x::postgresql:12 +47
- RHSA-2023:7667 Released 2023-12-06 · Red Hat rating Importantpostgresql:12 security update
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.src::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64::postgresql:12, postgres-decoderbufs-0.10.0-2.module+el8.2.0+9043+1dbb5661.src::postgresql:12 +15
- Red Hat Enterprise Linux AppStream E4S (v. 8.2) pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.ppc64le::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.src::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64::postgresql:12 +29
- Red Hat Enterprise Linux AppStream TUS (v. 8.2) pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.src::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64::postgresql:12, postgres-decoderbufs-0.10.0-2.module+el8.2.0+9043+1dbb5661.src::postgresql:12 +15
- RHSA-2023:7656 Released 2023-12-05 · Red Hat rating Importantpostgresql:12 security update
- Red Hat Enterprise Linux AppStream EUS (v.8.8) pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.aarch64::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.ppc64le::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.s390x::postgresql:12 +47
- RHSA-2023:7616 Released 2023-11-30 · Red Hat rating Importantpostgresql security update
- Red Hat CodeReady Linux Builder EUS (v.9.2) postgresql-docs-13.13-1.el9_2, postgresql-private-devel-13.13-1.el9_2, postgresql-server-devel-13.13-1.el9_2 +3
- Red Hat Enterprise Linux AppStream EUS (v.9.2) postgresql-13.13-1.el9_2, postgresql-contrib-13.13-1.el9_2, postgresql-plperl-13.13-1.el9_2 +5
- RHSA-2023:7581 Released 2023-11-29 · Red Hat rating Importantpostgresql:13 security update
- Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.aarch64::postgresql:13, pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.ppc64le::postgresql:13, pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.s390x::postgresql:13 +47
- RHSA-2023:7580 Released 2023-11-29 · Red Hat rating Importantpostgresql:13 security update
- Red Hat Enterprise Linux AppStream EUS (v.8.6) pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.aarch64::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.ppc64le::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.s390x::postgresql:13 +47
- RHSA-2023:7579 Released 2023-11-29 · Red Hat rating Importantpostgresql:13 security update
- Red Hat Enterprise Linux AppStream EUS (v.8.8) pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.aarch64::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.ppc64le::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.s390x::postgresql:13 +47
- RHSA-2023:7545 Released 2023-11-28 · Red Hat rating Importantpostgresql security update
- Red Hat CodeReady Linux Builder EUS (v.9.0) postgresql-private-devel-13.13-1.el9_0, postgresql-server-devel-13.13-1.el9_0, postgresql-test-13.13-1.el9_0
- Red Hat Enterprise Linux AppStream EUS (v.9.0) postgresql-13.13-1.el9_0, postgresql-contrib-13.13-1.el9_0, postgresql-plperl-13.13-1.el9_0 +5
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 7 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 8 | Affected | No fix yet: Fix deferred |
| Red Hat Software Collections | Affected | No fix yet: Fix deferred |
| RHACS 3.74 for RHEL 8 | Fixed | RHSA-2024:0304 |
| RHACS 4.1 for RHEL 8 | Fixed | RHSA-2024:0332 |
| RHACS 4.2 for RHEL 8 | Fixed | RHSA-2024:0337 |
| Red Hat CodeReady Linux Builder (v. 9) | Fixed | RHSA-2023:7784 |
| Red Hat CodeReady Linux Builder EUS (v.9.0) | Fixed | RHSA-2023:7545 |
| Red Hat CodeReady Linux Builder EUS (v.9.2) | Fixed | RHSA-2023:7616 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2023:7581, RHSA-2023:7714, RHSA-2023:7884 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2023:7784, RHSA-2023:7785 |
| Red Hat Enterprise Linux AppStream AUS (v. 8.2) | Fixed | RHSA-2023:7667 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2023:7694, RHSA-2023:7695 |
| Red Hat Enterprise Linux AppStream E4S (v. 8.2) | Fixed | RHSA-2023:7667 |
| Red Hat Enterprise Linux AppStream E4S (v.8.4) | Fixed | RHSA-2023:7694, RHSA-2023:7695 |
| Red Hat Enterprise Linux AppStream EUS (v.8.6) | Fixed | RHSA-2023:7580, RHSA-2023:7666 |
| Red Hat Enterprise Linux AppStream EUS (v.8.8) | Fixed | RHSA-2023:7579, RHSA-2023:7656, RHSA-2023:7883 |
| Red Hat Enterprise Linux AppStream EUS (v.9.0) | Fixed | RHSA-2023:7545 |
| Red Hat Enterprise Linux AppStream EUS (v.9.2) | Fixed | RHSA-2023:7616, RHSA-2023:7885 |
| Red Hat Enterprise Linux AppStream TUS (v. 8.2) | Fixed | RHSA-2023:7667 |
| Red Hat Enterprise Linux AppStream TUS (v.8.4) | Fixed | RHSA-2023:7694, RHSA-2023:7695 |
| Red Hat Software Collections for RHEL Workstation(v. 7) | Fixed | RHSA-2023:7770, RHSA-2023:7772 |
| Red Hat Software Collections for RHEL(v. 7) | Fixed | RHSA-2023:7770, RHSA-2023:7772 |
Not affected: 5 products
- RHACS 3.74 for RHEL 8
- RHACS 4.1 for RHEL 8
- RHACS 4.2 for RHEL 8
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
Timeline
- 2026-10-02 Threatist record created from CVE-2023-5870
- 2026-10-03 Alias added: GHSA-5gp7-j4r7-g66f
References
Advisory 23
- RHSA-2023:7545
- RHSA-2023:7579
- RHSA-2023:7580
- RHSA-2023:7581
- RHSA-2023:7616
- RHSA-2023:7656
- RHSA-2023:7666
- RHSA-2023:7667
- RHSA-2023:7694
- RHSA-2023:7695
- RHSA-2023:7714
- RHSA-2023:7770
- RHSA-2023:7772
- RHSA-2023:7784
- RHSA-2023:7785
- RHSA-2023:7883
- RHSA-2023:7884
- RHSA-2023:7885
- RHSA-2024:0304
- RHSA-2024:0332
- RHSA-2024:0337
- https://access.redhat.com/security/cve/CVE-2023-5870
- https://www.postgresql.org/support/security/CVE-2023-5870/
More Red Hat Codeready Linux Builder Eus vulnerabilities
- TI-2019-06284 Memory corruption in webkitgtk KEVCVSS 3.1HIGH 8.8
- TI-2023-04522 Glibc: buffer overflow in ld.so leading to privilege escalation KEVCVSS 3.1HIGH 7.8
- TI-2022-00359 Out-of-bounds write in kernel CVSS 3.1HIGH 8.8
- TI-2023-28739 Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service CVSS 3.1HIGH 7.5
- TI-2026-28834 jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers CVSS 4.0MEDIUM 6.9
- TI-2023-05404 Postgresql: buffer overrun from integer overflow in array modification CVSS 3.1HIGH 8.8
Sources
- CVE-2023-5870 · CVE Program
- CVE-2023-5870 · NVD
- FIRST EPSS
- GHSA-5gp7-j4r7-g66f · GitHub Advisory Database · CC BY 4.0
- CVE-2023-5870 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences