CVE-2023-5870 (published 2023-12-10T17:58:30.213Z)
A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.
Affected products: Vendor: n/a
Product: PostgreSQL
Versions: 16.1, 15.5, 14.10, 13.13, 12.17, 11.22