Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.

CVE-2023-5870 addresses a vulnerability in Red Hat Advanced Cluster Security 4.2 stemming from PostgreSQL's handling of the pg_cancel_backend role, which is responsible for signaling background workers. These workers include critical components such as the logical replication launcher, autovacuum workers, and the autovacuum launcher. The flaw arises when a non-core PostgreSQL extension implements a background worker that is less resilient to cancellation signals. A remote attacker with high privileges can exploit this by sending cancellation signals to these background workers, causing uncontrolled resource consumption and potentially triggering a denial of service (DoS) condition on the affected worker. This does not affect the core PostgreSQL background workers but only those introduced by third-party extensions. The attack requires no user interaction but does require authenticated high-privileged access, limiting the attack surface. The vulnerability has a CVSS 3.1 score of 2.2, indicating low severity due to its limited impact (only availability of a specific background worker) and the complexity of exploitation. No public exploits or active exploitation have been reported. The vulnerability highlights the importance of carefully managing PostgreSQL extensions and monitoring resource usage in cluster security environments.

Detailed information about CVE-2023-5870: Uncontrolled Resource Consumption in Red Hat Red Hat Advanced Cluster Security 4.2 affecting Red Hat Red Hat Advanced 

CVE-2023-5870: Uncontrolled Resource Consumption in Red Hat Red Hat Advanced Cluster Security 4.2 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-5870: Uncontrolled Resource Consumption in Red Hat Red Hat Advanced Cluster Security 4.2

Threats Tagged 'cve-2023-5870'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-5870'

Lead Pen Test Professional