All vulnerabilities

Servers and applications

CVE-2020-21469

An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. NOTE: this is disputed by the vendor because untrusted users cannot send SIGHUP signals; they can only be sent by a PostgreSQL superuser, a user with pg_reload_conf access, or a user with sufficient privileges at the OS level (the postgres account or the root account).

Severity
Medium 4.4
Published
22 Aug 2023
Last changed
17 Jun 2026
Added to UpHeron
16 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PostgreSQLServers and applications · cpe:a:postgresql:postgresql
  • Version 12.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-21469
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-21469