Database Auto-Vacuum Starvation Transaction ID Wraparound
Aggressive long-running analytics queries blocked auto-vacuum; reached 2-billion transaction ID limit forcing emergency shutdown.
Illustrative scenario, not a real incident
What happened
Contributing factors stated by the source
- Aggressive long-running analytics queries blocked auto-vacuum; reached 2-billion transacti...
The failure pattern
Watch the pattern: Destructive operation without verified recovery
Related standards
CollectSEA's mapping through this incident's failure pattern; not an official determination by the standards bodies.
- ASI08 Cascading Failures
- LLM06 Unbounded Consumption
- CP-9 System Backup
- CP-10 System Recovery and Reconstitution
- SC-5 Denial-of-Service Protection
- RV.3.4 Update the development process
- MAP 5.1 Estimate impacts from past uses and public incident reports
- MANAGE 4.3 Track and communicate incidents and errors
- CWE-770 Allocation of Resources Without Limits or Throttling
Building something similar?
Describe your design and see every precedent that applies, with safeguards you can hand to your coding agent.
Incidents with the same pattern
Blank provisioning parameter leads to automatic deletion of a customer's private cloud (UniSuper / Google Cloud, 2024)
An input parameter was left blank in an internal provisioning tool, so the system assigned an unknown default fixed one-year term to the customer's VMware Private Cloud.
Deletion script given site IDs instead of app IDs removes 775 customers' sites (Atlassian, 2022)
A script meant to retire a deprecated app was given IDs for entire customer sites and did not check whether an ID referred to the app or the whole site.
Engineer deletes the production database directory and every backup method fails (GitLab, 2017)
While working on replication, an engineer ran a data-directory deletion on the production database server instead of the secondary, removing about 300 GB before stopping it.
iLearningEngines, Inc. discloses a cybersecurity incident (SEC 8-K, November 2024)
iLearningEngines, Inc. (the “ Company ”) recently became aware of a cybersecurity incident.
HTTP Server and Oracle Weblogic Server Proxy Plug-in issue could allow unauthorized access
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as…
Security issue reported in Enterprise
Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.