Vulnerability · Published Feb 13, 2025 · Assigned by PostgreSQL
CVE-2025-1094PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
High 8.1
In plain English
A high-severity security flaw in PostgreSQL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 90.0% (higher than 99.8% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)90.0%top 0.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling2Metasploit, Public PoC
Official description
Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the function result to construct input to psql, the PostgreSQL interactive terminal. Similarly, improper neutralization of quoting syntax in PostgreSQL command line utility programs allows a source of command line arguments to achieve SQL injection when client_encoding is BIG5 and server_encoding is one of EUC_TW or MULE_INTERNAL. Versions before PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19 are affected.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | libpq | 13.20-1.el8_10 | ALSA-2025:1737 |
| AlmaLinux:9 | libpq | 13.20-1.el9_5 | ALSA-2025:1738 |
| AlmaLinux:8 | libpq-devel | 13.20-1.el8_10 | ALSA-2025:1737 |
| AlmaLinux:9 | libpq-devel | 13.20-1.el9_5 | ALSA-2025:1738 |
| AlmaLinux:8 | pg_repack | 1.4.6-3.module_el8.6.0+2760+1746ec94 | ALSA-2025:1736 |
| AlmaLinux:8 | pg_repack | 1.5.1-1.module_el8.10.0+3930+ecf33554 | ALSA-2025:1740 |
| AlmaLinux:8 | pg_repack | 1.4.8-1.module_el8.10.0+3798+606ebb9f | ALSA-2025:1739 |
| AlmaLinux:8 | pg_repack | 1.4.6-3.module_el8.9.0+3704+f1f917ce | ALSA-2025:1736 |
| AlmaLinux:8 | pg_repack | 1.4.6-3.module_el8.9.0+3704+f1f917ce | ALSA-2025:3082 |
| AlmaLinux:8 | pg_repack | 1.4.8-1.module_el8.9.0+3706+885c732e | ALSA-2025:1739 |
| AlmaLinux:9 | pg_repack | 1.5.1-1.module_el9.5.0+127+50ff03a9 | ALSA-2025:1743 |
| AlmaLinux:9 | pg_repack | 1.4.8-2.module_el9.5.0+120+4533eb20 | ALSA-2025:1741 |
| AlmaLinux:9 | pg_repack | 1.5.1-1.module_el9.5.0+128+1095dce2 | ALSA-2025:1743 |
| AlmaLinux:8 | pgaudit | 1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1 | ALSA-2025:3082 |
| AlmaLinux:8 | pgaudit | 1.5.0-1.module_el8.6.0+2760+1746ec94 | ALSA-2025:1736 |
| AlmaLinux:8 | pgaudit | 1.5.0-1.module_el8.6.0+3095+ee60d910 | ALSA-2025:1736 |
| AlmaLinux:8 | pgaudit | 16.0-1.module_el8.10.0+3798+606ebb9f | ALSA-2025:1740 |
| AlmaLinux:8 | pgaudit | 1.7.0-1.module_el8.9.0+3706+885c732e | ALSA-2025:1739 |
| AlmaLinux:8 | pgaudit | 1.4.0-7.module_el8.10.0+3889+48cb11fb.alma.1 | ALSA-2025:3082 |
| AlmaLinux:9 | pgaudit | 1.7.0-1.module_el9.3.0+52+21733919 | ALSA-2025:1741 |
| AlmaLinux:9 | pgaudit | 16.0-1.module_el9.4.0+66+eb9878bc | ALSA-2025:1743 |
| AlmaLinux:9 | pgvector | 0.6.2-1.module_el9.5.0+120+4533eb20 | ALSA-2025:1743 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.9.0+3704+f1f917ce | ALSA-2025:3082 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+3095+ee60d910 | ALSA-2025:1736 |
| AlmaLinux:8 | postgres-decoderbufs | 2.4.0-1.Final.module_el8.10.0+3798+606ebb9f | ALSA-2025:1740 |
| AlmaLinux:8 | postgres-decoderbufs | 1.9.7-1.Final.module_el8.9.0+3706+885c732e | ALSA-2025:1739 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2760+1746ec94 | ALSA-2025:1736 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.9.0+3704+f1f917ce | ALSA-2025:1736 |
| AlmaLinux:9 | postgres-decoderbufs | 1.9.7-1.Final.module_el9.3.0+52+21733919 | ALSA-2025:1741 |
| AlmaLinux:9 | postgres-decoderbufs | 2.4.0-1.Final.module_el9.4.0+66+eb9878bc | ALSA-2025:1743 |
| AlmaLinux:8 | postgresql | 13.20-1.module_el8.10.0+3967+334cd65a | ALSA-2025:1736 |
| AlmaLinux:8 | postgresql | 12.22-3.module_el8.10.0+3971+15b81305 | ALSA-2025:3082 |
| AlmaLinux:8 | postgresql | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:8 | postgresql | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:9 | postgresql | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:9 | postgresql | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:9 | postgresql | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| AlmaLinux:8 | postgresql-contrib | 13.20-1.module_el8.10.0+3967+334cd65a | ALSA-2025:1736 |
| AlmaLinux:8 | postgresql-contrib | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:8 | postgresql-contrib | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:8 | postgresql-contrib | 12.22-3.module_el8.10.0+3971+15b81305 | ALSA-2025:3082 |
| AlmaLinux:9 | postgresql-contrib | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| AlmaLinux:9 | postgresql-contrib | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:9 | postgresql-contrib | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:8 | postgresql-docs | 12.22-3.module_el8.10.0+3971+15b81305 | ALSA-2025:3082 |
| AlmaLinux:8 | postgresql-docs | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:8 | postgresql-docs | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:8 | postgresql-docs | 13.20-1.module_el8.10.0+3967+334cd65a | ALSA-2025:1736 |
| AlmaLinux:9 | postgresql-docs | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:9 | postgresql-docs | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:9 | postgresql-docs | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| AlmaLinux:8 | postgresql-plperl | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:8 | postgresql-plperl | 12.22-3.module_el8.10.0+3971+15b81305 | ALSA-2025:3082 |
| AlmaLinux:8 | postgresql-plperl | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:8 | postgresql-plperl | 13.20-1.module_el8.10.0+3967+334cd65a | ALSA-2025:1736 |
| AlmaLinux:9 | postgresql-plperl | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:9 | postgresql-plperl | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| AlmaLinux:9 | postgresql-plperl | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:8 | postgresql-plpython3 | 13.20-1.module_el8.10.0+3967+334cd65a | ALSA-2025:1736 |
| AlmaLinux:8 | postgresql-plpython3 | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:8 | postgresql-plpython3 | 12.22-3.module_el8.10.0+3971+15b81305 | ALSA-2025:3082 |
| AlmaLinux:8 | postgresql-plpython3 | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:9 | postgresql-plpython3 | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:9 | postgresql-plpython3 | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| AlmaLinux:9 | postgresql-plpython3 | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:8 | postgresql-pltcl | 12.22-3.module_el8.10.0+3971+15b81305 | ALSA-2025:3082 |
| AlmaLinux:8 | postgresql-pltcl | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:8 | postgresql-pltcl | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:8 | postgresql-pltcl | 13.20-1.module_el8.10.0+3967+334cd65a | ALSA-2025:1736 |
| AlmaLinux:9 | postgresql-pltcl | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| AlmaLinux:9 | postgresql-pltcl | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:9 | postgresql-pltcl | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:8 | postgresql-private-devel | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:8 | postgresql-private-devel | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:9 | postgresql-private-devel | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| AlmaLinux:9 | postgresql-private-devel | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:9 | postgresql-private-devel | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:8 | postgresql-private-libs | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:8 | postgresql-private-libs | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:9 | postgresql-private-libs | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| AlmaLinux:9 | postgresql-private-libs | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:9 | postgresql-private-libs | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:8 | postgresql-server | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:8 | postgresql-server | 13.20-1.module_el8.10.0+3967+334cd65a | ALSA-2025:1736 |
| AlmaLinux:8 | postgresql-server | 12.22-3.module_el8.10.0+3971+15b81305 | ALSA-2025:3082 |
| AlmaLinux:8 | postgresql-server | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:9 | postgresql-server | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| AlmaLinux:9 | postgresql-server | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:9 | postgresql-server | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:8 | postgresql-server-devel | 13.20-1.module_el8.10.0+3967+334cd65a | ALSA-2025:1736 |
| AlmaLinux:8 | postgresql-server-devel | 12.22-3.module_el8.10.0+3971+15b81305 | ALSA-2025:3082 |
| AlmaLinux:8 | postgresql-server-devel | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:8 | postgresql-server-devel | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:9 | postgresql-server-devel | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:9 | postgresql-server-devel | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| AlmaLinux:9 | postgresql-server-devel | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:8 | postgresql-static | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:8 | postgresql-static | 13.20-1.module_el8.10.0+3967+334cd65a | ALSA-2025:1736 |
| AlmaLinux:8 | postgresql-static | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:8 | postgresql-static | 12.22-3.module_el8.10.0+3971+15b81305 | ALSA-2025:3082 |
| AlmaLinux:9 | postgresql-static | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:9 | postgresql-static | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:9 | postgresql-static | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| AlmaLinux:8 | postgresql-test | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:8 | postgresql-test | 13.20-1.module_el8.10.0+3967+334cd65a | ALSA-2025:1736 |
| AlmaLinux:8 | postgresql-test | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:8 | postgresql-test | 12.22-3.module_el8.10.0+3971+15b81305 | ALSA-2025:3082 |
| AlmaLinux:9 | postgresql-test | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:9 | postgresql-test | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| AlmaLinux:9 | postgresql-test | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:8 | postgresql-test-rpm-macros | 13.20-1.module_el8.10.0+3967+334cd65a | ALSA-2025:1736 |
| AlmaLinux:8 | postgresql-test-rpm-macros | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:8 | postgresql-test-rpm-macros | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:8 | postgresql-test-rpm-macros | 12.22-3.module_el8.10.0+3971+15b81305 | ALSA-2025:3082 |
| AlmaLinux:9 | postgresql-test-rpm-macros | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:9 | postgresql-test-rpm-macros | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:9 | postgresql-test-rpm-macros | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| AlmaLinux:8 | postgresql-upgrade | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:8 | postgresql-upgrade | 12.22-3.module_el8.10.0+3971+15b81305 | ALSA-2025:3082 |
| AlmaLinux:8 | postgresql-upgrade | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:8 | postgresql-upgrade | 13.20-1.module_el8.10.0+3967+334cd65a | ALSA-2025:1736 |
| AlmaLinux:9 | postgresql-upgrade | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:9 | postgresql-upgrade | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:9 | postgresql-upgrade | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| AlmaLinux:8 | postgresql-upgrade-devel | 16.8-1.module_el8.10.0+3969+2c3c9353 | ALSA-2025:1740 |
| AlmaLinux:8 | postgresql-upgrade-devel | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1739 |
| AlmaLinux:8 | postgresql-upgrade-devel | 13.20-1.module_el8.10.0+3967+334cd65a | ALSA-2025:1736 |
| AlmaLinux:8 | postgresql-upgrade-devel | 12.22-3.module_el8.10.0+3971+15b81305 | ALSA-2025:3082 |
| AlmaLinux:9 | postgresql-upgrade-devel | 13.20-1.el9_5 | ALSA-2025:1742 |
| AlmaLinux:9 | postgresql-upgrade-devel | 16.8-1.module_el9.5.0+141+f4b0f9b7 | ALSA-2025:1743 |
| AlmaLinux:9 | postgresql-upgrade-devel | 15.12-1.module_el9.5.0+140+e3f03d9d | ALSA-2025:1741 |
| Alpine:v3.20 | postgresql14 | 14.17-r0 | ALPINE-CVE-2025-1094 |
| Alpine:v3.20 | postgresql15 | 15.11-r0 | ALPINE-CVE-2025-1094 |
| Alpine:v3.21 | postgresql15 | 15.11-r0 | ALPINE-CVE-2025-1094 |
| Alpine:v3.22 | postgresql15 | 15.11-r0 | ALPINE-CVE-2025-1094 |
| Alpine:v3.20 | postgresql16 | 16.8-r0 | ALPINE-CVE-2025-1094 |
| Alpine:v3.21 | postgresql16 | 16.8-r0 | ALPINE-CVE-2025-1094 |
| Alpine:v3.22 | postgresql16 | 16.8-r0 | ALPINE-CVE-2025-1094 |
| Alpine:v3.23 | postgresql16 | 16.8-r0 | ALPINE-CVE-2025-1094 |
| Alpine:v3.24 | postgresql16 | 16.8-r0 | ALPINE-CVE-2025-1094 |
| Alpine:v3.21 | postgresql17 | 17.4-r0 | ALPINE-CVE-2025-1094 |
| Alpine:v3.22 | postgresql17 | 17.4-r0 | ALPINE-CVE-2025-1094 |
| Alpine:v3.23 | postgresql17 | 17.4-r0 | ALPINE-CVE-2025-1094 |
| Alpine:v3.24 | postgresql17 | 17.4-r0 | ALPINE-CVE-2025-1094 |
| Debian:12 | postgresql-15 | 15.11-0+deb12u1 | DEBIAN-CVE-2025-1094 |
| Debian:13 | postgresql-17 | 17.3-1 | DEBIAN-CVE-2025-1094 |
| Rocky Linux:8 | libpq | 0:13.20-1.el8_10 | RLSA-2025:1737 |
| Rocky Linux:9 | libpq | 0:13.20-1.el9_5 | RLSA-2025:1738 |
| Rocky Linux:8 | pg_repack | 0:1.4.8-1.module+el8.10.0+1858+fcc46a79 | RLSA-2025:1739 |
| Rocky Linux:8 | pg_repack | 0:1.4.8-1.module+el8.9.0+1525+fc91df60 | RLSA-2025:1739 |
| Rocky Linux:8 | pg_repack | 0:1.5.1-1.module+el8.10.0+1900+d7340343 | RLSA-2025:1740 |
| Rocky Linux:8 | pg_repack | 0:1.4.6-3.module+el8.10.0+1862+29bef648 | RLSA-2025:1736 |
| Rocky Linux:8 | pg_repack | 0:1.4.8-1.module+el8.10.0+1622+bd25b19c | RLSA-2025:1739 |
| Rocky Linux:8 | pg_repack | 0:1.4.6-3.module+el8.10.0+1862+29bef648 | RLSA-2025:3082 |
| Rocky Linux:8 | pg_repack | 0:1.4.6-3.module+el8.9.0+1594+4a6adae9 | RLSA-2025:3082 |
| Rocky Linux:8 | pg_repack | 0:1.4.6-3.module+el8.9.0+1603+444d1b54 | RLSA-2025:3082 |
| Rocky Linux:9 | pg_repack | 0:1.4.8-2.module+el9.5.0+30637+4391fcca | RLSA-2025:1741 |
| Rocky Linux:9 | pg_repack | 0:1.5.1-1.module+el9.5.0+30638+72f697e1 | RLSA-2025:1743 |
| Rocky Linux:8 | pgaudit | 0:1.4.0-7.module+el8.9.0+1735+a332307b | RLSA-2025:3082 |
| Rocky Linux:8 | pgaudit | 0:16.0-1.module+el8.10.0+1622+bd25b19c | RLSA-2025:1740 |
| Rocky Linux:8 | pgaudit | 0:16.0-1.module+el8.10.0+1858+fcc46a79 | RLSA-2025:1740 |
| Rocky Linux:8 | pgaudit | 0:1.5.0-1.module+el8.9.0+1594+4a6adae9 | RLSA-2025:1736 |
| Rocky Linux:8 | pgaudit | 0:1.7.0-1.module+el8.9.0+1525+fc91df60 | RLSA-2025:1739 |
| Rocky Linux:9 | pgaudit | 0:16.0-1.module+el9.5.0+30638+72f697e1 | RLSA-2025:1743 |
| Rocky Linux:9 | pgaudit | 0:1.7.0-1.module+el9.5.0+30637+4391fcca | RLSA-2025:1741 |
| Rocky Linux:9 | pgvector | 0:0.6.2-1.module+el9.5.0+30638+72f697e1 | RLSA-2025:1743 |
| Rocky Linux:8 | postgres-decoderbufs | 0:1.9.7-1.Final.module+el8.9.0+1525+fc91df60 | RLSA-2025:1739 |
| Rocky Linux:8 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el8.10.0+1858+fcc46a79 | RLSA-2025:1740 |
| Rocky Linux:8 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el8.10.0+1622+bd25b19c | RLSA-2025:1740 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.9.0+1594+4a6adae9 | RLSA-2025:3082 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.10.0+1862+29bef648 | RLSA-2025:3082 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.9.0+1603+444d1b54 | RLSA-2025:3082 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.10.0+1862+29bef648 | RLSA-2025:1736 |
| Rocky Linux:9 | postgres-decoderbufs | 0:1.9.7-1.Final.module+el9.5.0+30637+4391fcca | RLSA-2025:1741 |
| Rocky Linux:9 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el9.5.0+30638+72f697e1 | RLSA-2025:1743 |
| Rocky Linux:8 | postgresql | 0:12.22-3.module+el8.10.0+1942+05740481 | RLSA-2025:3082 |
| Rocky Linux:8 | postgresql | 0:13.20-1.module+el8.10.0+1939+bc4b0228 | RLSA-2025:1736 |
| Rocky Linux:8 | postgresql | 0:16.8-1.module+el8.10.0+1941+ca32dfe4 | RLSA-2025:1740 |
| Rocky Linux:8 | postgresql | 0:15.12-1.module+el8.10.0+1940+835325f2 | RLSA-2025:1739 |
| Rocky Linux:9 | postgresql | 0:13.20-1.el9_5 | RLSA-2025:1742 |
| Rocky Linux:9 | postgresql | 0:16.8-1.module+el9.5.0+30638+72f697e1 | RLSA-2025:1743 |
| Rocky Linux:9 | postgresql | 0:15.12-1.module+el9.5.0+30637+4391fcca | RLSA-2025:1741 |
| Ubuntu:22.04:LTS | postgresql-14 | 14.17-0ubuntu0.22.04.1 | USN-7315-1 |
| Ubuntu:22.04:LTS | postgresql-14 | 14.17-0ubuntu0.22.04.1 | UBUNTU-CVE-2025-1094 |
| Ubuntu:24.04:LTS | postgresql-16 | 16.8-0ubuntu0.24.04.1 | USN-7315-1 |
| Ubuntu:24.04:LTS | postgresql-16 | 16.8-0ubuntu0.24.04.1 | UBUNTU-CVE-2025-1094 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | PostgreSQL | 17 – before 17.316 – before 16.715 – before 15.1114 – before 14.160 – before 13.19 |
Weakness: CWE-149 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.postgresql.org/support/security/CVE-2025-1094/
- https://lists.debian.org/debian-lts-announce/2025/02/msg00015.html
- http://www.openwall.com/lists/oss-security/2025/02/16/3
- http://www.openwall.com/lists/oss-security/2025/02/20/1
- https://lists.debian.org/debian-lts-announce/2025/02/msg00024.html
- https://security.netapp.com/advisory/ntap-20250221-0010/