Denial of Service Vulnerability in PostgreSQL by PostgreSQL Global Development Group

CVE-2020-21469

Summary

A vulnerability in PostgreSQL 12.2 allows for a denial of service by sending SIGHUP signals repeatedly. Although the ability to send these signals is limited to PostgreSQL superusers or users with specific privileges, the concern highlights the importance of implementation controls. Unauthorized users cannot initiate this process, which suggests that the impact is primarily on users with advanced permissions. Thorough configuration management and user access controls are essential for protecting databases against such vulnerabilities.

References