Homepage

CVE-2023-5870 The advisory has been revoked - it doesn't affect any version of package pg_repack  (opens in a new tab)

Threat Intelligence

EPSS
2.56% (84th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-ROCKY9-PGREPACK-6146754
  • published9 Jan 2024
  • disclosed10 Dec 2023
Report a new vulnerability Found a mistake?

Introduced: 10 Dec 2023

CVE-2023-5870  (opens in a new tab)

Amendment

The Rocky-Linux security team deemed this advisory irrelevant for Rocky-Linux:9.

NVD Description

Note: Versions mentioned in the description apply only to the upstream pg_repack package and not the pg_repack package as distributed by Rocky-Linux.

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.

References