Homepage

CVE-2023-5870 The advisory has been revoked - it doesn't affect any version of package postgresql-14-bitnami-compat  (opens in a new tab)

Threat Intelligence

EPSS
2.56% (84th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CHAINGUARDLATEST-POSTGRESQL14BITNAMICOMPAT-14913437
  • published12 Jan 2026
  • disclosed10 Dec 2023
Report a new vulnerability Found a mistake?

Introduced: 10 Dec 2023

CVE-2023-5870  (opens in a new tab)

Amendment

The Chainguard security team deemed this advisory irrelevant for Chainguard:latest.

NVD Description

Note: Versions mentioned in the description apply only to the upstream postgresql-14-bitnami-compat package and not the postgresql-14-bitnami-compat package as distributed by Chainguard.

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.

References