Skip to content
OpenAdvisories
Medium USN-7520-2 1 CVE

postgresql-17 vulnerability

Published May 21, 2025 · Updated Feb 4, 2026

Ecosystem: Ubuntu

Summary

USN-7520-1 fixed a vulnerability in PostgreSQL. This update provides the
corresponding updates for Ubuntu 25.04.

Original advisory details:

It was discovered that PostgreSQL incorrectly handled the GB18030
encoding. An attacker could possibly use this issue to cause PostgreSQL to
crash, resulting in a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 25.04 postgresql-17 17.5-0ubuntu0.25.04.1

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-4207

    PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

    Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions …

    rust postgresql-9.3 postgresql15 postgresql-9.5 Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2025-4207