Vulnerability · Published Nov 13, 2025 · Assigned by PostgreSQL
CVE-2025-12817PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege
Low 3.1
In plain English
A low-severity missing authorization in PostgreSQL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)3.1Low
Exploit odds (30 days)0.2%top 84.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | pg_repack | 1.4.6-3.module_el8.6.0+3095+ee60d910 | ALSA-2026:0523 |
| AlmaLinux:8 | pg_repack | 1.4.8-1.module_el8.9.0+3706+885c732e | ALSA-2026:0524 |
| AlmaLinux:8 | pg_repack | 1.5.1-1.module_el8.10.0+3930+ecf33554 | ALSA-2026:0519 |
| AlmaLinux:8 | pg_repack | 1.4.6-3.module_el8.6.0+2760+1746ec94 | ALSA-2026:0523 |
| AlmaLinux:9 | pg_repack | 1.5.1-1.module_el9.6.0+146+c54fdeca | ALSA-2026:0493 |
| AlmaLinux:9 | pg_repack | 1.4.8-2.module_el9.5.0+119+18833d03 | ALSA-2026:0492 |
| AlmaLinux:8 | pgaudit | 1.5.0-1.module_el8.6.0+3095+ee60d910 | ALSA-2026:0523 |
| AlmaLinux:8 | pgaudit | 16.0-1.module_el8.10.0+3798+606ebb9f | ALSA-2026:0519 |
| AlmaLinux:8 | pgaudit | 1.7.0-1.module_el8.9.0+3706+885c732e | ALSA-2026:0524 |
| AlmaLinux:8 | pgaudit | 1.5.0-1.module_el8.6.0+2760+1746ec94 | ALSA-2026:0523 |
| AlmaLinux:9 | pgaudit | 1.7.0-1.module_el9.3.0+52+21733919 | ALSA-2026:0492 |
| AlmaLinux:9 | pgaudit | 16.0-1.module_el9.4.0+66+eb9878bc | ALSA-2026:0493 |
| AlmaLinux:9 | pgvector | 0.6.2-2.module_el9.6.0+167+4e561146 | ALSA-2026:0493 |
| AlmaLinux:9 | postgis | 3.5.3-3.module_el9.7.0+187+2286ff0a | ALSA-2026:0493 |
| AlmaLinux:9 | postgis-client | 3.5.3-3.module_el9.7.0+187+2286ff0a | ALSA-2026:0493 |
| AlmaLinux:9 | postgis-docs | 3.5.3-3.module_el9.7.0+187+2286ff0a | ALSA-2026:0493 |
| AlmaLinux:9 | postgis-upgrade | 3.5.3-3.module_el9.7.0+187+2286ff0a | ALSA-2026:0493 |
| AlmaLinux:9 | postgis-utils | 3.5.3-3.module_el9.7.0+187+2286ff0a | ALSA-2026:0493 |
| AlmaLinux:8 | postgres-decoderbufs | 2.4.0-1.Final.module_el8.10.0+3798+606ebb9f | ALSA-2026:0519 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+3095+ee60d910 | ALSA-2026:0523 |
| AlmaLinux:8 | postgres-decoderbufs | 1.9.7-1.Final.module_el8.9.0+3706+885c732e | ALSA-2026:0524 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2760+1746ec94 | ALSA-2026:0523 |
| AlmaLinux:9 | postgres-decoderbufs | 1.9.7-1.Final.module_el9.3.0+52+21733919 | ALSA-2026:0492 |
| AlmaLinux:9 | postgres-decoderbufs | 2.4.0-1.Final.module_el9.4.0+66+eb9878bc | ALSA-2026:0493 |
| AlmaLinux:8 | postgresql | 13.23-1.module_el8.10.0+4097+ed3c9b5c | ALSA-2026:0523 |
| AlmaLinux:8 | postgresql | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:8 | postgresql | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:9 | postgresql | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:9 | postgresql | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:9 | postgresql | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| AlmaLinux:8 | postgresql-contrib | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:8 | postgresql-contrib | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:8 | postgresql-contrib | 13.23-1.module_el8.10.0+4097+ed3c9b5c | ALSA-2026:0523 |
| AlmaLinux:9 | postgresql-contrib | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:9 | postgresql-contrib | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| AlmaLinux:9 | postgresql-contrib | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:8 | postgresql-docs | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:8 | postgresql-docs | 13.23-1.module_el8.10.0+4097+ed3c9b5c | ALSA-2026:0523 |
| AlmaLinux:8 | postgresql-docs | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:9 | postgresql-docs | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:9 | postgresql-docs | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:9 | postgresql-docs | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| AlmaLinux:8 | postgresql-plperl | 13.23-1.module_el8.10.0+4097+ed3c9b5c | ALSA-2026:0523 |
| AlmaLinux:8 | postgresql-plperl | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:8 | postgresql-plperl | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:9 | postgresql-plperl | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:9 | postgresql-plperl | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| AlmaLinux:9 | postgresql-plperl | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:8 | postgresql-plpython3 | 13.23-1.module_el8.10.0+4097+ed3c9b5c | ALSA-2026:0523 |
| AlmaLinux:8 | postgresql-plpython3 | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:8 | postgresql-plpython3 | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:9 | postgresql-plpython3 | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:9 | postgresql-plpython3 | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| AlmaLinux:9 | postgresql-plpython3 | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:8 | postgresql-pltcl | 13.23-1.module_el8.10.0+4097+ed3c9b5c | ALSA-2026:0523 |
| AlmaLinux:8 | postgresql-pltcl | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:8 | postgresql-pltcl | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:9 | postgresql-pltcl | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:9 | postgresql-pltcl | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:9 | postgresql-pltcl | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| AlmaLinux:8 | postgresql-private-devel | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:8 | postgresql-private-devel | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:9 | postgresql-private-devel | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:9 | postgresql-private-devel | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| AlmaLinux:9 | postgresql-private-devel | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:8 | postgresql-private-libs | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:8 | postgresql-private-libs | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:9 | postgresql-private-libs | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:9 | postgresql-private-libs | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:9 | postgresql-private-libs | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| AlmaLinux:8 | postgresql-server | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:8 | postgresql-server | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:8 | postgresql-server | 13.23-1.module_el8.10.0+4097+ed3c9b5c | ALSA-2026:0523 |
| AlmaLinux:9 | postgresql-server | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| AlmaLinux:9 | postgresql-server | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:9 | postgresql-server | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:8 | postgresql-server-devel | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:8 | postgresql-server-devel | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:8 | postgresql-server-devel | 13.23-1.module_el8.10.0+4097+ed3c9b5c | ALSA-2026:0523 |
| AlmaLinux:9 | postgresql-server-devel | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| AlmaLinux:9 | postgresql-server-devel | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:9 | postgresql-server-devel | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:8 | postgresql-static | 13.23-1.module_el8.10.0+4097+ed3c9b5c | ALSA-2026:0523 |
| AlmaLinux:8 | postgresql-static | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:8 | postgresql-static | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:9 | postgresql-static | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| AlmaLinux:9 | postgresql-static | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:9 | postgresql-static | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:8 | postgresql-test | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:8 | postgresql-test | 13.23-1.module_el8.10.0+4097+ed3c9b5c | ALSA-2026:0523 |
| AlmaLinux:8 | postgresql-test | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:9 | postgresql-test | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:9 | postgresql-test | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| AlmaLinux:9 | postgresql-test | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:8 | postgresql-test-rpm-macros | 13.23-1.module_el8.10.0+4097+ed3c9b5c | ALSA-2026:0523 |
| AlmaLinux:8 | postgresql-test-rpm-macros | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:8 | postgresql-test-rpm-macros | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:9 | postgresql-test-rpm-macros | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:9 | postgresql-test-rpm-macros | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:9 | postgresql-test-rpm-macros | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| AlmaLinux:8 | postgresql-upgrade | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:8 | postgresql-upgrade | 13.23-1.module_el8.10.0+4097+ed3c9b5c | ALSA-2026:0523 |
| AlmaLinux:8 | postgresql-upgrade | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:9 | postgresql-upgrade | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:9 | postgresql-upgrade | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| AlmaLinux:9 | postgresql-upgrade | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:8 | postgresql-upgrade-devel | 16.11-1.module_el8.10.0+4099+381a55d6 | ALSA-2026:0519 |
| AlmaLinux:8 | postgresql-upgrade-devel | 13.23-1.module_el8.10.0+4097+ed3c9b5c | ALSA-2026:0523 |
| AlmaLinux:8 | postgresql-upgrade-devel | 15.15-1.module_el8.10.0+4098+1f4e965c | ALSA-2026:0524 |
| AlmaLinux:9 | postgresql-upgrade-devel | 13.23-1.el9_7 | ALSA-2026:0491 |
| AlmaLinux:9 | postgresql-upgrade-devel | 15.15-2.module_el9.7.0+203+960b74c0 | ALSA-2026:0492 |
| AlmaLinux:9 | postgresql-upgrade-devel | 16.11-1.module_el9.7.0+202+21427d8a | ALSA-2026:0493 |
| Alpine:v3.20 | postgresql15 | 15.15-r0 | ALPINE-CVE-2025-12817 |
| Alpine:v3.22 | postgresql15 | 15.15-r0 | ALPINE-CVE-2025-12817 |
| Alpine:v3.20 | postgresql16 | 16.11-r0 | ALPINE-CVE-2025-12817 |
| Alpine:v3.21 | postgresql16 | 16.11-r0 | ALPINE-CVE-2025-12817 |
| Alpine:v3.22 | postgresql16 | 16.11-r0 | ALPINE-CVE-2025-12817 |
| Alpine:v3.23 | postgresql16 | 16.11-r0 | ALPINE-CVE-2025-12817 |
| Alpine:v3.24 | postgresql16 | 16.11-r0 | ALPINE-CVE-2025-12817 |
| Alpine:v3.21 | postgresql17 | 17.7-r0 | ALPINE-CVE-2025-12817 |
| Alpine:v3.22 | postgresql17 | 17.7-r0 | ALPINE-CVE-2025-12817 |
| Alpine:v3.23 | postgresql17 | 17.7-r0 | ALPINE-CVE-2025-12817 |
| Alpine:v3.24 | postgresql17 | 17.7-r0 | ALPINE-CVE-2025-12817 |
| Alpine:v3.23 | postgresql18 | 18.1-r0 | ALPINE-CVE-2025-12817 |
| Alpine:v3.24 | postgresql18 | 18.1-r0 | ALPINE-CVE-2025-12817 |
| Debian:12 | postgresql-15 | 15.15-0+deb12u1 | DEBIAN-CVE-2025-12817 |
| Debian:13 | postgresql-17 | 17.7-0+deb13u1 | DEBIAN-CVE-2025-12817 |
| Debian:14 | postgresql-18 | 18.1-1 | DEBIAN-CVE-2025-12817 |
| Rocky Linux:8 | pg_repack | 0:1.4.6-3.module+el8.10.0+1862+29bef648 | RLSA-2026:0523 |
| Rocky Linux:8 | pg_repack | 0:1.4.8-1.module+el8.10.0+40056+df351139 | RLSA-2026:0524 |
| Rocky Linux:8 | pg_repack | 0:1.4.8-1.module+el8.10.0+1858+fcc46a79 | RLSA-2026:0524 |
| Rocky Linux:8 | pg_repack | 0:1.4.8-1.module+el8.9.0+1525+fc91df60 | RLSA-2026:0524 |
| Rocky Linux:8 | pg_repack | 0:1.5.1-1.module+el8.10.0+40057+c37a0e3d | RLSA-2026:0519 |
| Rocky Linux:8 | pg_repack | 0:1.5.1-1.module+el8.10.0+1900+d7340343 | RLSA-2026:0519 |
| Rocky Linux:8 | pg_repack | 0:1.4.8-1.module+el8.10.0+1622+bd25b19c | RLSA-2026:0524 |
| Rocky Linux:8 | pg_repack | 0:1.4.6-3.module+el8.10.0+40055+b85d5ce2 | RLSA-2026:0523 |
| Rocky Linux:8 | pg_repack | 0:1.4.6-3.module+el8.9.0+1594+4a6adae9 | RLSA-2026:0523 |
| Rocky Linux:8 | pg_repack | 0:1.4.6-3.module+el8.9.0+1603+444d1b54 | RLSA-2026:0523 |
| Rocky Linux:9 | pg_repack | 0:1.5.1-1.module+el9.7.0+40012+a654bbaa | RLSA-2026:0493 |
| Rocky Linux:9 | pg_repack | 0:1.5.1-1.module+el9.7.0+40060+39463e08 | RLSA-2026:0493 |
| Rocky Linux:9 | pg_repack | 0:1.4.8-2.module+el9.7.0+40011+28af63c9 | RLSA-2026:0492 |
| Rocky Linux:8 | pgaudit | 0:16.0-1.module+el8.10.0+1858+fcc46a79 | RLSA-2026:0519 |
| Rocky Linux:8 | pgaudit | 0:1.5.0-1.module+el8.9.0+1594+4a6adae9 | RLSA-2026:0523 |
| Rocky Linux:8 | pgaudit | 0:1.5.0-1.module+el8.10.0+40055+b85d5ce2 | RLSA-2026:0523 |
| Rocky Linux:8 | pgaudit | 0:16.0-1.module+el8.10.0+40057+c37a0e3d | RLSA-2026:0519 |
| Rocky Linux:8 | pgaudit | 0:1.7.0-1.module+el8.10.0+40056+df351139 | RLSA-2026:0524 |
| Rocky Linux:8 | pgaudit | 0:1.7.0-1.module+el8.9.0+1525+fc91df60 | RLSA-2026:0524 |
| Rocky Linux:8 | pgaudit | 0:16.0-1.module+el8.10.0+1622+bd25b19c | RLSA-2026:0519 |
| Rocky Linux:9 | pgaudit | 0:1.7.0-1.module+el9.7.0+40011+28af63c9 | RLSA-2026:0492 |
| Rocky Linux:9 | pgaudit | 0:16.0-1.module+el9.7.0+40060+39463e08 | RLSA-2026:0493 |
| Rocky Linux:9 | pgaudit | 0:16.0-1.module+el9.7.0+40012+a654bbaa | RLSA-2026:0493 |
| Rocky Linux:9 | pgvector | 0:0.6.2-2.module+el9.7.0+40012+a654bbaa | RLSA-2026:0493 |
| Rocky Linux:9 | pgvector | 0:0.6.2-2.module+el9.7.0+40060+39463e08 | RLSA-2026:0493 |
| Rocky Linux:9 | postgis | 0:3.5.3-3.module+el9.7.0+40012+a654bbaa | RLSA-2026:0493 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.10.0+40055+b85d5ce2 | RLSA-2026:0523 |
| Rocky Linux:8 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el8.10.0+40057+c37a0e3d | RLSA-2026:0519 |
| Rocky Linux:8 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el8.10.0+1622+bd25b19c | RLSA-2026:0519 |
| Rocky Linux:8 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el8.10.0+1858+fcc46a79 | RLSA-2026:0519 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.9.0+1594+4a6adae9 | RLSA-2026:0523 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.10.0+1862+29bef648 | RLSA-2026:0523 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.9.0+1603+444d1b54 | RLSA-2026:0523 |
| Rocky Linux:8 | postgres-decoderbufs | 0:1.9.7-1.Final.module+el8.9.0+1525+fc91df60 | RLSA-2026:0524 |
| Rocky Linux:8 | postgres-decoderbufs | 0:1.9.7-1.Final.module+el8.10.0+40056+df351139 | RLSA-2026:0524 |
| Rocky Linux:9 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el9.7.0+40012+a654bbaa | RLSA-2026:0493 |
| Rocky Linux:9 | postgres-decoderbufs | 0:2.4.0-1.Final.module+el9.7.0+40060+39463e08 | RLSA-2026:0493 |
| Rocky Linux:9 | postgres-decoderbufs | 0:1.9.7-1.Final.module+el9.7.0+40011+28af63c9 | RLSA-2026:0492 |
| Rocky Linux:8 | postgresql | 0:15.15-1.module+el8.10.0+40056+df351139 | RLSA-2026:0524 |
| Rocky Linux:8 | postgresql | 0:13.23-1.module+el8.10.0+40055+b85d5ce2 | RLSA-2026:0523 |
| Rocky Linux:8 | postgresql | 0:16.11-1.module+el8.10.0+40057+c37a0e3d | RLSA-2026:0519 |
| Rocky Linux:9 | postgresql | 0:15.15-2.module+el9.7.0+40058+d9f04599 | RLSA-2026:0492 |
| Rocky Linux:9 | postgresql | 0:13.23-1.el9_7 | RLSA-2026:0491 |
| Rocky Linux:9 | postgresql | 0:16.11-1.module+el9.7.0+40060+39463e08 | RLSA-2026:0493 |
| Ubuntu:22.04:LTS | postgresql-14 | 14.20-0ubuntu0.22.04.1 | UBUNTU-CVE-2025-12817 |
| Ubuntu:22.04:LTS | postgresql-14 | 14.20-0ubuntu0.22.04.1 | USN-7908-1 |
| Ubuntu:24.04:LTS | postgresql-16 | 16.11-0ubuntu0.24.04.1 | UBUNTU-CVE-2025-12817 |
| Ubuntu:24.04:LTS | postgresql-16 | 16.11-0ubuntu0.24.04.1 | USN-7908-1 |
| Ubuntu:25.10 | postgresql-17 | 17.7-0ubuntu0.25.10.1 | USN-7908-1 |
| Ubuntu:25.10 | postgresql-17 | 17.7-0ubuntu0.25.10.1 | UBUNTU-CVE-2025-12817 |
| Ubuntu:26.04:LTS | postgresql-18 | 18.1-1ubuntu1 | UBUNTU-CVE-2025-12817 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | PostgreSQL | 18 – before 18.117 – before 17.716 – before 16.1115 – before 15.1514 – before 14.200 – before 13.23 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L