The article claims that this denial of service attack would rate a 9.8 on the CVE scale if the CVE wasn't bogus, but NIST has this handy calculator, and it's sa

The article claims that this denial of service attack would rate a 9.8 on the CVE scale if the CVE wasn't bogus, but NIST has this handy calculator, and it's saying 4.9 for me: https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:U/RC:C/CR:H/IR:H/AR:H/MAV:L/MAC:L/MPR:N/MUI:N/MS:C/MC:N/MI:N/MA:L&version=3.1 https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=... (I can get it to report a severity of 8.9 by setting the availability impact to "High". However, I don't think that's appropriate, since you can just restart the postgres daemon, assuming repeated SIGHUPs do actually crash it.)