Ubuntu.comUB:CVE-2020-21469CVE-2020-21469
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
5.1%
DISPUTED An issue was discovered in PostgreSQL 12.2 allows attackers
to cause a denial of service via repeatedly sending SIGHUP signals. NOTE:
this is disputed by the vendor because untrusted users cannot send SIGHUP
signals; they can only be sent by a PostgreSQL superuser, a user with
pg_reload_conf access, or a user with sufficient privileges at the OS level
(the postgres account or the root account).
Notes
| Author | Note |
|---|---|
| leosilva | PostgreSQL 9.3 is end of life upstream, and no updates are are available. Marking as deferred in -esm-main releases. |
| mdeslaur | This is an old issue that was fixed in 2019 upstream |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | postgresql-10 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | postgresql-12 | < 12.5-0ubuntu0.20.04.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | postgresql-9.3 | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | postgresql-9.5 | < any | UNKNOWN |
References
launchpad.net/bugs/cve/CVE-2020-21469
nvd.nist.gov/vuln/detail/CVE-2020-21469
security-tracker.debian.org/tracker/CVE-2020-21469
www.cve.org/CVERecord?id=CVE-2020-21469
www.postgresql.org/about/news/cve-2020-21469-is-not-a-security-vulnerability-2701/
www.postgresql.org/message-id/CAA8ZSMqAHDCgo07hqKoM5XJaoQy6Vv76O7966agez4ffyQktkA%40mail.gmail.com
Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
5.1%