Log in Start free

Vulnerability · Published Nov 16, 2020 · Assigned by redhat

CVE-2020-25695

High 8.8

In plain English

A high-severity SQL injection in postgresql. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 46.4% (higher than 99% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)8.8High
Exploit odds (30 days)46.4%top 1.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8postgres-decoderbufs0.10.0-2.module_el8.6.0+2760+1746ec94ALSA-2020:5620
AlmaLinux:8postgres-decoderbufs0.10.0-2.module_el8.6.0+2758+4f4474dfALSA-2020:5620
Alpine:v3.20postgresql1412.5-r0ALPINE-CVE-2020-25695
Alpine:v3.20postgresql1512.5-r0ALPINE-CVE-2020-25695
Rocky Linux:8pgaudit0:1.4.0-4.module+el8.4.0+545+ca56da2eRLSA-2020:5620
Rocky Linux:8postgres-decoderbufs0:0.10.0-2.module+el8.5.0+684+c3892ef9RLSA-2020:5620
Rocky Linux:8postgres-decoderbufs0:0.10.0-2.module+el8.4.0+424+71d47d9aRLSA-2020:5620

Affected products (as reported)

VendorProductVersions
n/a postgresql All PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24

Weakness: CWE-89

References