CVE record · CVE-2023-5870

Postgresql: role pg_signal_backend can signal certain superuser processes.

CVSS 2.2 LowEPSS 0.026 · 85th percentile

Published by the CVE Program (CNA: redhat) at 10 Dec 2023, 17:58 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Red Hat	Red Hat Advanced Cluster Security 4.2 Package name: advanced-cluster-security/rhacs-central-db-rhel8 https://catalog.redhat.com/software/containers/	unaffected 4.2.4-6 to before * rpm Other versions: affected
Red Hat	Red Hat Advanced Cluster Security 4.2 Package name: advanced-cluster-security/rhacs-main-rhel8 https://catalog.redhat.com/software/containers/	unaffected 4.2.4-6 to before * rpm Other versions: affected
Red Hat	Red Hat Advanced Cluster Security 4.2 Package name: advanced-cluster-security/rhacs-operator-bundle https://catalog.redhat.com/software/containers/	unaffected 4.2.4-7 to before * rpm Other versions: affected
Red Hat	Red Hat Advanced Cluster Security 4.2 Package name: advanced-cluster-security/rhacs-scanner-db-rhel8 https://catalog.redhat.com/software/containers/	unaffected 4.2.4-6 to before * rpm Other versions: affected
Red Hat	Red Hat Advanced Cluster Security 4.2 Package name: advanced-cluster-security/rhacs-scanner-db-slim-rhel8 https://catalog.redhat.com/software/containers/	unaffected 4.2.4-7 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8 Package name: postgresql:13 https://access.redhat.com/downloads/content/package-browser/	unaffected 8090020231114113712.a75119d5 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8 Package name: postgresql:12 https://access.redhat.com/downloads/content/package-browser/	unaffected 8090020231128173330.a75119d5 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8 Package name: postgresql:15 https://access.redhat.com/downloads/content/package-browser/	unaffected 8090020231114113548.a75119d5 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support Package name: postgresql:12 https://access.redhat.com/downloads/content/package-browser/	unaffected 8020020231128165246.4cda2c84 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service Package name: postgresql:12 https://access.redhat.com/downloads/content/package-browser/	unaffected 8020020231128165246.4cda2c84 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions Package name: postgresql:12 https://access.redhat.com/downloads/content/package-browser/	unaffected 8020020231128165246.4cda2c84 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Package name: postgresql:12 https://access.redhat.com/downloads/content/package-browser/	unaffected 8040020231127153301.522a0ee4 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Package name: postgresql:13 https://access.redhat.com/downloads/content/package-browser/	unaffected 8040020231127154806.522a0ee4 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service Package name: postgresql:12 https://access.redhat.com/downloads/content/package-browser/	unaffected 8040020231127153301.522a0ee4 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service Package name: postgresql:13 https://access.redhat.com/downloads/content/package-browser/	unaffected 8040020231127154806.522a0ee4 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Package name: postgresql:12 https://access.redhat.com/downloads/content/package-browser/	unaffected 8040020231127153301.522a0ee4 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Package name: postgresql:13 https://access.redhat.com/downloads/content/package-browser/	unaffected 8040020231127154806.522a0ee4 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Package name: postgresql:13 https://access.redhat.com/downloads/content/package-browser/	unaffected 8060020231114115246.ad008a3a to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Package name: postgresql:12 https://access.redhat.com/downloads/content/package-browser/	unaffected 8060020231128165328.ad008a3a to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support Package name: postgresql:13 https://access.redhat.com/downloads/content/package-browser/	unaffected 8080020231114105206.63b34585 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support Package name: postgresql:12 https://access.redhat.com/downloads/content/package-browser/	unaffected 8080020231128165335.63b34585 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support Package name: postgresql:15 https://access.redhat.com/downloads/content/package-browser/	unaffected 8080020231113134015.63b34585 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9 Package name: postgresql https://access.redhat.com/downloads/content/package-browser/	unaffected 0:13.13-1.el9_3 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9 Package name: postgresql:15 https://access.redhat.com/downloads/content/package-browser/	unaffected 9030020231120082734.rhel9 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support Package name: postgresql https://access.redhat.com/downloads/content/package-browser/	unaffected 0:13.13-1.el9_0 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support Package name: postgresql https://access.redhat.com/downloads/content/package-browser/	unaffected 0:13.13-1.el9_2 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support Package name: postgresql:15 https://access.redhat.com/downloads/content/package-browser/	unaffected 9020020231115020618.rhel9 to before * rpm Other versions: affected
Red Hat	Red Hat Software Collections for Red Hat Enterprise Linux 7 Package name: rh-postgresql12-postgresql https://access.redhat.com/downloads/content/package-browser/	unaffected 0:12.17-1.el7 to before * rpm Other versions: affected
Red Hat	Red Hat Software Collections for Red Hat Enterprise Linux 7 Package name: rh-postgresql13-postgresql https://access.redhat.com/downloads/content/package-browser/	unaffected 0:13.13-1.el7 to before * rpm Other versions: affected
Red Hat	RHACS-3.74-RHEL-8 Package name: advanced-cluster-security/rhacs-central-db-rhel8 https://catalog.redhat.com/software/containers/	unaffected 3.74.8-9 to before * rpm Other versions: affected
Red Hat	RHACS-3.74-RHEL-8 Package name: advanced-cluster-security/rhacs-main-rhel8 https://catalog.redhat.com/software/containers/	unaffected 3.74.8-9 to before * rpm Other versions: affected
Red Hat	RHACS-3.74-RHEL-8 Package name: advanced-cluster-security/rhacs-operator-bundle https://catalog.redhat.com/software/containers/	unaffected 3.74.8-7 to before * rpm Other versions: affected
Red Hat	RHACS-3.74-RHEL-8 Package name: advanced-cluster-security/rhacs-scanner-db-rhel8 https://catalog.redhat.com/software/containers/	unaffected 3.74.8-9 to before * rpm Other versions: affected
Red Hat	RHACS-3.74-RHEL-8 Package name: advanced-cluster-security/rhacs-scanner-db-slim-rhel8 https://catalog.redhat.com/software/containers/	unaffected 3.74.8-9 to before * rpm Other versions: affected
Red Hat	RHACS-4.1-RHEL-8 Package name: advanced-cluster-security/rhacs-central-db-rhel8 https://catalog.redhat.com/software/containers/	unaffected 4.1.6-6 to before * rpm Other versions: affected
Red Hat	RHACS-4.1-RHEL-8 Package name: advanced-cluster-security/rhacs-main-rhel8 https://catalog.redhat.com/software/containers/	unaffected 4.1.6-6 to before * rpm Other versions: affected
Red Hat	RHACS-4.1-RHEL-8 Package name: advanced-cluster-security/rhacs-operator-bundle https://catalog.redhat.com/software/containers/	unaffected 4.1.6-6 to before * rpm Other versions: affected
Red Hat	RHACS-4.1-RHEL-8 Package name: advanced-cluster-security/rhacs-scanner-db-rhel8 https://catalog.redhat.com/software/containers/	unaffected 4.1.6-6 to before * rpm Other versions: affected
Red Hat	RHACS-4.1-RHEL-8 Package name: advanced-cluster-security/rhacs-scanner-db-slim-rhel8 https://catalog.redhat.com/software/containers/	unaffected 4.1.6-6 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 6 Package name: postgresql https://access.redhat.com/downloads/content/package-browser/	No versions given Other versions: unknown

And 5 more products. The full list is on the CVE record.

Identifiers: CVE-2023-5870
CNA: redhat
Weakness (CWE): CWE-400
Tags: Red Hat Advanced Cluster Security 4.2
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 8.2 Advanced Update Support
Red Hat Enterprise Linux 8.2 Telecommunications Update Service
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red Hat Enterprise Linux 8.4 Telecommunications Update Service
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
Denial of service
Published: 10 Dec 2023
Updated: 2 Mar 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
2.2	Low	3.1	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L	CNA (redhat)

CISA KEV Not listed.
EPSS 0.026, the 85th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 10 Dec 2023. New records show when each source confirmed them.

Sources

References from the CNA

access.redhat.com/errata/RHSA-2023:7545 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7579 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7580 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7581 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7616 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7656 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7666 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7667 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7694 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7695 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7714 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7770 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7772 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7784 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7785 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7883 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7884 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2023:7885 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2024:0304 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2024:0332 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2024:0337 vendor-advisoryredhat
access.redhat.com/security/cve/CVE-2023-5870 vdb-entryredhat
bugzilla.redhat.com/show_bug.cgi?id=2247170 issue-trackingredhat
www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/
www.postgresql.org/support/security/CVE-2023-5870/

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.