Permissions, Privileges, and Access Controls in PostgreSQL - CVE-2023-5870

Vulnerability identifier: #VU82943

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2023-5870

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

Affected software:
PostgreSQL
Debian Linux
Amazon Linux AMI
Gentoo Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Software Development Kit 12
Galera for Ericsson 15
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Legacy Module
SUSE Package Hub 15
Server Applications Module
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
IBM Security QRadar Network Threat Analytics
PowerStore T
Dell EMC PowerStore Family Operating System
Storage Protect Plus Server
NetWorker Management Console (NMC)
Red Hat Advanced Cluster Security for Kubernetes
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Sterling Connect:Direct Web Services
Dell NetWorker Virtual Edition
IBM Cloud Pak for Business Automation
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
postgresql-client-10 (Ubuntu package)
postgresql-10 (Ubuntu package)
postgresql-client-9.5 (Ubuntu package)
postgresql-9.5 (Ubuntu package)
postgres-decoderbufs
pgaudit
pg_repack
postgresql-12 (Ubuntu package)
postgresql-client-12 (Ubuntu package)
rh-postgresql12-postgresql (Red Hat package)
postgresql-upgrade-devel
postgresql-test-rpm-macros
postgresql-upgrade
postgresql-test
postgresql-static
postgresql-server-devel
postgresql-server
postgresql-pltcl
postgresql-plpython3
postgresql-plperl
postgresql-docs
postgresql-contrib
postgresql
postgresql12-pltcl-debuginfo
postgresql12-plpython
postgresql12-server-devel-debuginfo
postgresql12-plpython-debuginfo
postgresql12-pltcl
postgresql12-server
postgresql12-plperl
postgresql12-contrib-debuginfo
postgresql12-debuginfo
postgresql12-devel
postgresql12-devel-debuginfo
postgresql12-debugsource
postgresql12-server-debuginfo
postgresql12-contrib
postgresql12-server-devel
postgresql12
postgresql12-docs
postgresql12-plperl-debuginfo
postgresql12-test
postgresql12-llvmjit-debuginfo
postgresql12-llvmjit-devel
postgresql12-llvmjit
postgresql-13 (Debian package)
rh-postgresql13-postgresql (Red Hat package)
postgresql (Red Hat package)
postgresql13-debuginfo
postgresql13-pltcl-debuginfo
postgresql13-debugsource
postgresql13-docs
postgresql13
postgresql13-plperl
postgresql13-plperl-debuginfo
postgresql13-server
postgresql13-contrib-debuginfo
postgresql13-plpython
postgresql13-plpython-debuginfo
postgresql13-contrib
postgresql13-server-debuginfo
postgresql13-pltcl
postgresql13-server-devel-debuginfo
postgresql13-server-devel
postgresql13-devel
postgresql13-devel-debuginfo
postgresql13-llvmjit
postgresql13-test
postgresql13-llvmjit-devel
postgresql13-llvmjit-debuginfo
libpq-debugsource
libpq-debuginfo
libpq
libpq-devel
postgresql-13-test
postgresql-13-static
postgresql-13
postgresql-13-contrib
postgresql-13-debuginfo
postgresql-13-debugsource
postgresql-13-docs
postgresql-13-llvmjit
postgresql-13-plperl
postgresql-13-plpython3
postgresql-13-pltcl
postgresql-13-private-devel
postgresql-13-private-libs
postgresql-13-server
postgresql-13-server-devel
postgresql-13-test-rpm-macros
postgresql-client-14 (Ubuntu package)
postgresql-14 (Ubuntu package)
postgresql14-devel
postgresql14-devel-debuginfo
postgresql14-docs
postgresql14
postgresql14-contrib-debuginfo
postgresql14-pltcl
postgresql14-plpython
postgresql14-debuginfo
postgresql14-plpython-debuginfo
postgresql14-contrib
postgresql14-plperl
postgresql14-server
postgresql14-plperl-debuginfo
postgresql14-server-debuginfo
postgresql14-server-devel
postgresql14-server-devel-debuginfo
postgresql14-debugsource
postgresql14-pltcl-debuginfo
postgresql14-llvmjit-debuginfo
postgresql14-llvmjit-devel
postgresql14-test
postgresql14-llvmjit
postgresql-15 (Ubuntu package)
postgresql-client-15 (Ubuntu package)
postgresql-15 (Debian package)
postgresql-private-libs
postgresql-private-devel
postgresql15
postgresql15-plpython
postgresql15-contrib
postgresql15-debuginfo
postgresql15-plperl-debuginfo
postgresql15-pltcl-debuginfo
postgresql15-plpython-debuginfo
postgresql15-debugsource
postgresql15-pltcl
postgresql15-server-debuginfo
postgresql15-server-devel-debuginfo
postgresql15-devel
postgresql15-contrib-debuginfo
postgresql15-plperl
postgresql15-server
postgresql15-devel-debuginfo
postgresql15-server-devel
postgresql15-docs
postgresql15-test
postgresql15-llvmjit-devel
postgresql15-llvmjit
postgresql15-llvmjit-debuginfo
postgresql16-plperl-debuginfo
postgresql16-server-devel
postgresql16-server-devel-debuginfo
postgresql16-plperl
postgresql16-devel-debuginfo
postgresql16-contrib-debuginfo
libecpg6
libecpg6-debuginfo
postgresql16-devel
postgresql16-pltcl
postgresql16
postgresql16-debuginfo
postgresql16-plpython
postgresql16-debugsource
postgresql16-pltcl-debuginfo
libpq5-debuginfo
postgresql16-plpython-debuginfo
postgresql16-server-debuginfo
postgresql16-server
postgresql16-contrib
libpq5
postgresql16-docs
libpq5-debuginfo-32bit
libpq5-32bit
libecpg6-debuginfo-32bit
libecpg6-32bit
postgresql16-test
libecpg6-32bit-debuginfo
libpq5-32bit-debuginfo
postgresql16-devel-mini-debuginfo
postgresql16-llvmjit-devel
postgresql16-llvmjit
postgresql16-llvmjit-debuginfo
postgresql16-mini-debugsource
postgresql16-devel-mini
postgresql-devel
postgresql-plpython
postgresql-llvmjit
postgresql-llvmjit-devel
IBM Security Guardium
IBM Data Risk Manager
IBM Storage Scale System
Juniper Secure Analytics (JSA)
Dell EMC VxRail Appliance

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to pg_cancel_backend rolse signals background workers, including the logical replication launcher, autovacuum workers and the autovacuum launcher. A remote privileged user can abuse this behavior and perform a denial of service (DoS) attack.

Install updates from vendor's website.

• https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/