Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-21469

Опубликовано: 22 авг. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 4.4

Описание

** DISPUTED ** An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. NOTE: this is disputed by the vendor because untrusted users cannot send SIGHUP signals; they can only be sent by a PostgreSQL superuser, a user with pg_reload_conf access, or a user with sufficient privileges at the OS level (the postgres account or the root account).

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

not-affected

disputed
esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

12.5-0ubuntu0.20.04.1
focal

released

12.5-0ubuntu0.20.04.1
jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

trusty

ignored

end of standard support
upstream

released

12.5

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

not-affected

lunar

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

not-affected

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

trusty

ignored

end of standard support
upstream

needs-triage

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

not-affected

disputed
esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

trusty

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

esm-infra/xenial

not-affected

disputed
focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

trusty

DNE

Показывать по

EPSS

Процентиль: 5%
0.00024
Низкий

4.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.4
redhat
почти 2 года назад

An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. NOTE: this is disputed by the vendor because untrusted users cannot send SIGHUP signals; they can only be sent by a PostgreSQL superuser, a user with pg_reload_conf access, or a user with sufficient privileges at the OS level (the postgres account or the root account).

CVSS3: 4.4
nvd
почти 2 года назад

An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. NOTE: this is disputed by the vendor because untrusted users cannot send SIGHUP signals; they can only be sent by a PostgreSQL superuser, a user with pg_reload_conf access, or a user with sufficient privileges at the OS level (the postgres account or the root account).

CVSS3: 4.4
debian
почти 2 года назад

An issue was discovered in PostgreSQL 12.2 allows attackers to cause a ...

CVSS3: 7.5
github
почти 2 года назад

An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals.

CVSS3: 7.5
fstec
почти 2 года назад

Уязвимость обработчика сигнала HUP (SIGHUP) системы управления базами данных PostgreSQL, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 5%
0.00024
Низкий

4.4 Medium

CVSS3

Уязвимость CVE-2020-21469