Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

WS-2019-0603

Good to know:

icon

Date: October 7, 2019

In PostgreSQL, versions 9.5 prior to REL9_5_20, 9.6 prior to REL9_6_16, 10 prior to REL_10_11, 11 prior to REL_11_6, 12 prior to REL_12_1, are vulnerable to uncontrolled resource consumption, due to a missing if maximum child processes are running when creating a new bgworker. When the postmaster’s child-process arrays are temporarily full, a malicious client can spawn a new bgworker process and crash the postmaster.

Language: C

Severity Score

Related Resources (8)

https://github.com/postgres/postgres/commit/3887e9455f812035473eee1cba0cf9c237969998
https://github.com/postgres/postgres/commit/3887e9455f812035473eee1cba0cf9c237969998 https://github.com/postgres/postgres/commit/8c2910ce5ed71fa1b70343627069000a4f6f1420 https://github.com/postgres/postgres/commit/c69e982a60fb5b67fb946300209460f35 https://github.com/postgres/postgres/commit/3887e9455f812035473eee1cba0cf9c237969998
https://github.com/postgres/postgres/commit/8c2910ce5ed71fa1b70343627069000a4f6f1420
https://github.com/postgres/postgres/commit/1b5c2ddcdefc31619c209716af3b4238968e6ce9
https://github.com/postgres/postgres/commit/021065aac676c96b703b9c7a02da763469a183c1
https://github.com/postgres/postgres/commit/7e8d0eb63fbb3bf01c9b4a68b12a10864ce53b52
https://github.com/postgres/postgres/commit/c69e982a60fb5b67fb946300209460f35c19daf2
https://www.mend.io/vulnerability-database/WS-2019-0603

Severity Score

Weakness Type (CWE)

Uncontrolled Resource Consumption ('Resource Exhaustion')

CWE-400

Top Fix

icon

Upgrade Version

Upgrade to version REL9_5_20, REL9_6_16, REL_10_11, REL_11_6, REL_12_1, REL_13_0

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

Do you need more information?

Contact Us