Nixpkgs Security Tracker

Login with GitHub

Suggestion detail

Untriaged
(browse all)
Permalink CVE-2023-5870
created 4 months, 3 weeks ago
Postgresql: role pg_signal_backend can signal certain superuser processes.

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.

Affected products

PostgreSQL
  • ==13.13
  • ==16.1
  • ==11.22
  • ==15.5
  • ==14.10
  • ==12.17
postgresql
  • *
postgresql:12
  • *
postgresql:13
  • *
postgresql:15
  • *
mingw-postgresql
postgresql:10/postgresql
postgresql:12/postgresql
postgresql:13/postgresql
postgresql:14/postgresql
postgresql:15/postgresql
  • *
postgresql:16/postgresql
  • *
rh-postgresql10-postgresql
rh-postgresql12-postgresql
  • *
rh-postgresql13-postgresql
  • *
advanced-cluster-security/rhacs-main-rhel8
  • *
advanced-cluster-security/rhacs-operator-bundle
  • *
advanced-cluster-security/rhacs-central-db-rhel8
  • *
advanced-cluster-security/rhacs-scanner-db-rhel8
  • *
advanced-cluster-security/rhacs-scanner-db-slim-rhel8
  • *

Matching in nixpkgs

pkgs.postgresql

Powerful, open source object-relational database system

  • nixos-unstable -

pkgs.postgresql_13

Powerful, open source object-relational database system

  • nixos-unstable -

pkgs.postgresql_14

Powerful, open source object-relational database system

  • nixos-unstable -

pkgs.postgresql_15

Powerful, open source object-relational database system

  • nixos-unstable -

pkgs.postgresql_16

Powerful, open source object-relational database system

  • nixos-unstable -

pkgs.postgresql_17

Powerful, open source object-relational database system

  • nixos-unstable -

pkgs.postgresql_18

Powerful, open source object-relational database system

  • nixos-unstable -

pkgs.postgresql_jdbc

JDBC driver for PostgreSQL allowing Java programs to connect to a PostgreSQL database

  • nixos-unstable -

pkgs.postgresqlPackages.anonymizer

Extension to mask or replace personally identifiable information (PII) or commercially sensitive data from a PostgreSQL database

  • nixos-unstable -

pkgs.postgresql13Packages.anonymizer

Extension to mask or replace personally identifiable information (PII) or commercially sensitive data from a PostgreSQL database

  • nixos-unstable -

pkgs.postgresql14Packages.anonymizer

Extension to mask or replace personally identifiable information (PII) or commercially sensitive data from a PostgreSQL database

  • nixos-unstable -

pkgs.postgresql15Packages.anonymizer

Extension to mask or replace personally identifiable information (PII) or commercially sensitive data from a PostgreSQL database

  • nixos-unstable -

pkgs.postgresql16Packages.anonymizer

Extension to mask or replace personally identifiable information (PII) or commercially sensitive data from a PostgreSQL database

  • nixos-unstable -

pkgs.postgresql18Packages.anonymizer

Extension to mask or replace personally identifiable information (PII) or commercially sensitive data from a PostgreSQL database

  • nixos-unstable -

Package maintainers