NA

CVE-2020-21469

Published: 22/08/2023 Updated: 17/05/2024
CVSS v3 Base Score: 4.4 | Impact Score: 3.6 | Exploitability Score: 0.8
VMScore: 0

Vulnerability Summary

An issue exists in PostgreSQL 12.2 allows malicious users to cause a denial of service via repeatedly sending SIGHUP signals. NOTE: this is disputed by the vendor because untrusted users cannot send SIGHUP signals; they can only be sent by a PostgreSQL superuser, a user with pg_reload_conf access, or a user with sufficient privileges at the OS level (the postgres account or the root account).

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

postgresql postgresql 12.2

Vendor Advisories

DescriptionThe MITRE CVE dictionary describes this issue as: An issue was discovered in PostgreSQL 122 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals ...