Description
Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the function result to construct input to psql, the PostgreSQL interactive terminal. Similarly, improper neutralization of quoting syntax in PostgreSQL command line utility programs allows a source of command line arguments to achieve SQL injection when client_encoding is BIG5 and server_encoding is one of EUC_TW or MULE_INTERNAL. Versions before PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19 are affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PostgreSQL | 17 – < 17.3, 16 – < 16.7, 15 – < 15.11, 14 – < 14.16, < 13.19 | 17.3 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | postgresql-17 | 17.3-1 | — |
| Debian 12 | postgresql-15 | 15.11-0+deb12u1 | — |
| Debian 11 | postgresql-13 | 13.19-0+deb11u1 | DLA-4052-2, DLA-4052-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | postgresql-16 | 16.8-0ubuntu0.24.04.1 | USN-7315-1 |
| Ubuntu 22.04 LTS | postgresql-14 | 14.17-0ubuntu0.22.04.1 | USN-7315-1 |
| Ubuntu 20.04 LTS | postgresql-12 | 12.22-0ubuntu0.20.04.2 | USN-7315-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | postgresql-10 | 10.23-0ubuntu0.18.04.2+esm3 | USN-7315-2 |
| Ubuntu Pro 16.04 LTS | postgresql-9.5 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | postgresql-9.3 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | libpq +16 | 13.20-1.el9_5 | RHSA-2025:1743, RHSA-2025:1742, RHSA-2025:1741 |
| RHEL 9 | pg_repack | 1.4.8-2.module+el9.5.0+22224+f5585c78 | RHSA-2025:1743, RHSA-2025:1741 |
| RHEL 9 | pgaudit | 1.7.0-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:1743, RHSA-2025:1741 |
| RHEL 9 | pgvector | 0.6.2-1.module+el9.5.0+21770+ad2986ef | RHSA-2025:1743 |
| RHEL 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:1743, RHSA-2025:1741 |
| RHEL 8 | libpq +1 | 13.20-1.el8_10 | RHSA-2025:1737 |
| RHEL 8 | pg_repack | 1.4.6-3.module+el8.9.0+19330+c97ddbdf | RHSA-2025:3082, RHSA-2025:1740, RHSA-2025:1739 |
| RHEL 8 | pgaudit | 1.4.0-7.module+el8.10.0+22214+9beb89d6 | RHSA-2025:3082, RHSA-2025:1740, RHSA-2025:1739 |
| RHEL 8 | postgres-decoderbufs | 0.10.0-2.module+el8.9.0+19330+c97ddbdf | RHSA-2025:3082, RHSA-2025:1740, RHSA-2025:1739 |
| RHEL 8 | postgresql +12 | 12.22-3.module+el8.10.0+22943+b3f02cd1 | RHSA-2025:3082, RHSA-2025:1740, RHSA-2025:1739 |
| RHEL 8 | postgresql-private-libs +1 | 15.12-1.module+el8.10.0+22871+d29fc53a | RHSA-2025:1740, RHSA-2025:1739 |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | libpq +15 | 13.20-1.el9_4 | RHSA-2025:1732, RHSA-2025:1731, RHSA-2025:1730 |
| RHEL 9.4 EUS | pg_repack | 1.4.8-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:1731, RHSA-2025:1730 |
| RHEL 9.4 EUS | pgaudit | 1.7.0-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:1731, RHSA-2025:1730 |
| RHEL 9.4 EUS | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:1731, RHSA-2025:1730 |
| RHEL 9.4 EUS | postgresql-test-rpm-macros | 15.12-1.module+el9.4.0+22874+04f06197 | RHSA-2025:1731, RHSA-2025:1730 |
| RHEL 9.2 EUS | libpq +15 | 13.20-1.el9_2 | RHSA-2025:1733, RHSA-2025:1727, RHSA-2025:1722 |
| RHEL 9.2 EUS | pg_repack | 1.4.8-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:1722 |
| RHEL 9.2 EUS | pgaudit | 1.7.0-1.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:1722 |
| RHEL 9.2 EUS | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 | RHSA-2025:1722 |
| RHEL 9.2 EUS | postgresql-test-rpm-macros | 15.12-1.module+el9.2.0+22870+3f900c25 | RHSA-2025:1722 |
| RHEL 9.0 E4S | libpq +9 | 13.20-1.el9_0 | RHSA-2025:1728, RHSA-2025:1725 |
| RHEL 8.8 EUS | libpq +1 | 13.20-1.el8_8 | RHSA-2025:1744 |
| RHEL 8.8 EUS | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:3050, RHSA-2025:1729, RHSA-2025:1721 |
| RHEL 8.8 EUS | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:3050, RHSA-2025:1729, RHSA-2025:1721 |
| RHEL 8.8 EUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2025:3050, RHSA-2025:1729, RHSA-2025:1721 |
| RHEL 8.8 EUS | postgresql +12 | 12.22-1.module+el8.8.0+22932+18496b71.1 | RHSA-2025:3050, RHSA-2025:1729, RHSA-2025:1721 |
| RHEL 8.8 EUS | postgresql-private-libs +1 | 15.12-1.module+el8.8.0+22869+fb8ac434 | RHSA-2025:1721 |
| RHEL 8.6 TUS | libpq +1 | 13.20-1.el8_6 | RHSA-2025:1745 |
| RHEL 8.6 TUS | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:3064, RHSA-2025:1723 |
| RHEL 8.6 TUS | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:3064, RHSA-2025:1723 |
| RHEL 8.6 TUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2025:3064, RHSA-2025:1723 |
| RHEL 8.6 TUS | postgresql +12 | 12.22-1.module+el8.6.0+22933+051d2e53.1 | RHSA-2025:3064, RHSA-2025:1723 |
| RHEL 8.6 E4S | libpq +1 | 13.20-1.el8_6 | RHSA-2025:1745 |
| RHEL 8.6 E4S | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:3064, RHSA-2025:1723 |
| RHEL 8.6 E4S | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:3064, RHSA-2025:1723 |
| RHEL 8.6 E4S | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2025:3064, RHSA-2025:1723 |
| RHEL 8.6 E4S | postgresql +12 | 12.22-1.module+el8.6.0+22933+051d2e53.1 | RHSA-2025:3064, RHSA-2025:1723 |
| RHEL 8.6 AUS | libpq +1 | 13.20-1.el8_6 | RHSA-2025:1745 |
| RHEL 8.6 AUS | pg_repack | 1.4.6-3.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:3064, RHSA-2025:1723 |
| RHEL 8.6 AUS | pgaudit | 1.4.0-5.module+el8.5.0+11354+78b3c9c5 | RHSA-2025:3064, RHSA-2025:1723 |
| RHEL 8.6 AUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2025:3064, RHSA-2025:1723 |
| RHEL 8.6 AUS | postgresql +12 | 12.22-1.module+el8.6.0+22933+051d2e53.1 | RHSA-2025:3064, RHSA-2025:1723 |
| RHEL 8.4 TUS | libpq +1 | 13.20-1.el8_4 | RHSA-2025:1735 |
| RHEL 8.4 TUS | pgaudit | 1.4.0-6.module+el8.4.0+11288+c193d6d7 | RHSA-2025:3062, RHSA-2025:1724 |
| RHEL 8.4 TUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2025:3062, RHSA-2025:1724 |
| RHEL 8.4 TUS | postgresql +12 | 12.22-1.module+el8.4.0+22939+ae879ac2.1 | RHSA-2025:3062, RHSA-2025:1724 |
| RHEL 8.4 E4S | libpq +1 | 13.20-1.el8_4 | RHSA-2025:1735 |
| RHEL 8.4 E4S | pgaudit | 1.4.0-6.module+el8.4.0+11288+c193d6d7 | RHSA-2025:3062, RHSA-2025:1724 |
| RHEL 8.4 E4S | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2025:3062, RHSA-2025:1724 |
| RHEL 8.4 E4S | postgresql +12 | 12.22-1.module+el8.4.0+22939+ae879ac2.1 | RHSA-2025:3062, RHSA-2025:1724 |
| RHEL 8.4 AUS | libpq +1 | 13.20-1.el8_4 | RHSA-2025:1735 |
| RHEL 8.4 AUS | pgaudit | 1.4.0-6.module+el8.4.0+11288+c193d6d7 | RHSA-2025:3062, RHSA-2025:1724 |
| RHEL 8.4 AUS | postgres-decoderbufs | 0.10.0-2.module+el8.4.0+8873+b821c30a | RHSA-2025:3062, RHSA-2025:1724 |
| RHEL 8.4 AUS | postgresql +12 | 12.22-1.module+el8.4.0+22939+ae879ac2.1 | RHSA-2025:3062, RHSA-2025:1724 |
| RHEL 8.2 AUS | libpq +1 | 12.7-1.el8_2.2 | RHSA-2025:1720 |
| RHEL 8.2 AUS | pgaudit | 1.4.0-4.module+el8.2.0+9043+1dbb5661 | RHSA-2025:3063 |
| RHEL 8.2 AUS | postgres-decoderbufs | 0.10.0-2.module+el8.2.0+9043+1dbb5661 | RHSA-2025:3063 |
| RHEL 8.2 AUS | postgresql +12 | 12.22-1.module+el8.2.0+22934+603b1645.1 | RHSA-2025:3063 |
| RHEL 7 ELS | postgresql +11 | 9.2.24-9.el7_9.3 | RHSA-2025:3978 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | libpq +16 | 13.20-1.el9_5 | ALSA-2025:1743, ALSA-2025:1742, ALSA-2025:1741 |
| AlmaLinux 9 | pg_repack | 1.4.8-2.module_el9.5.0+120+4533eb20 | ALSA-2025:1743, ALSA-2025:1741 |
| AlmaLinux 9 | pgaudit | 1.7.0-1.module_el9.3.0+52+21733919 | ALSA-2025:1743, ALSA-2025:1741 |
| AlmaLinux 9 | pgvector | 0.6.2-1.module_el9.5.0+120+4533eb20 | ALSA-2025:1743 |
| AlmaLinux 9 | postgres-decoderbufs | 1.9.7-1.Final.module_el9.3.0+52+21733919 | ALSA-2025:1743, ALSA-2025:1741 |
| AlmaLinux 8 | libpq +1 | 13.20-1.el8_10 | ALSA-2025:1737 |
| AlmaLinux 8 | pg_repack | 1.4.6-3.module_el8.6.0+2760+1746ec94 | ALSA-2025:3082, ALSA-2025:1740, ALSA-2025:1739 |
| AlmaLinux 8 | pgaudit | 1.4.0-7.module_el8.9.0+3740+0e74851f.alma.1 | ALSA-2025:3082, ALSA-2025:1740, ALSA-2025:1739 |
| AlmaLinux 8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2760+1746ec94 | ALSA-2025:3082, ALSA-2025:1740, ALSA-2025:1739 |
| AlmaLinux 8 | postgresql +12 | 12.22-3.module_el8.10.0+3971+15b81305 | ALSA-2025:3082, ALSA-2025:1740, ALSA-2025:1739 |
| AlmaLinux 8 | postgresql-private-libs +1 | 15.12-1.module_el8.10.0+3968+5ca3d05a | ALSA-2025:1740, ALSA-2025:1739 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | libpq +1 | 13.20-1.el9_5 | RLSA-2025:1743, RLSA-2025:1742, RLSA-2025:1741 |
| Rocky Linux 9 | pg_repack | 1.4.8-2.module+el9.5.0+30637+4391fcca | RLSA-2025:1743, RLSA-2025:1741 |
| Rocky Linux 9 | pgaudit | 1.7.0-1.module+el9.5.0+30637+4391fcca | RLSA-2025:1743, RLSA-2025:1741 |
| Rocky Linux 9 | pgvector | 0.6.2-1.module+el9.5.0+30638+72f697e1 | RLSA-2025:1743 |
| Rocky Linux 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.5.0+30637+4391fcca | RLSA-2025:1743, RLSA-2025:1741 |
| Rocky Linux 8 | libpq | 13.20-1.el8_10 | RLSA-2025:1737 |
| Rocky Linux 8 | pg_repack | 1.4.6-3.module+el8.9.0+1594+4a6adae9 | RLSA-2025:3082, RLSA-2025:1740, RLSA-2025:1739 |
| Rocky Linux 8 | pgaudit | 1.4.0-7.module+el8.9.0+1735+a332307b | RLSA-2025:3082, RLSA-2025:1740, RLSA-2025:1739 |
| Rocky Linux 8 | postgres-decoderbufs | 0.10.0-2.module+el8.9.0+1594+4a6adae9 | RLSA-2025:3082, RLSA-2025:1740, RLSA-2025:1739 |
| Rocky Linux 8 | postgresql | 12.22-3.module+el8.10.0+1942+05740481 | RLSA-2025:3082, RLSA-2025:1740, RLSA-2025:1739 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | postgresql15 | 15.12-150600.16.14.1 | SUSE-SU-2025:00614-1 |
| SLES 15 SP6 | postgresql14 | 14.17-150600.16.14.1 | SUSE-SU-2025:0631-1 |
| SLES 15 SP6 | postgresql15 | 15.12-150600.16.14.1 | SUSE-SU-2025:0614-1 |
| SLES 15 SP6 | postgresql16 | 16.8-150600.16.15.1 | SUSE-SU-2025:0635-1 |
| SLES 15 SP6 | postgresql17 | 17.4-150600.13.10.1 | SUSE-SU-2025:0616-1 |
| SLES 15 SP5 | postgresql14 | 14.17-150200.5.55.1 | SUSE-SU-2025:0632-1 |
| SLES 15 SP5 | postgresql15 | 15.12-150200.5.38.1 | SUSE-SU-2025:0633-1 |
| SLES 15 SP5 | postgresql16 | 16.8-150200.5.26.1 | SUSE-SU-2025:0636-1 |
| SLES 15 SP5 | postgresql17 | 17.4-150200.5.10.1 | SUSE-SU-2025:0618-1 |
| SLES 15 SP4 | postgresql13 | 13.20-150200.5.69.1 | SUSE-SU-2025:0619-1 |
| SLES 15 SP4 | postgresql14 | 14.17-150200.5.55.1 | SUSE-SU-2025:0632-1 |
| SLES 15 SP4 | postgresql15 | 15.12-150200.5.38.1 | SUSE-SU-2025:0633-1 |
| SLES 15 SP4 | postgresql16 | 16.8-150200.5.26.1 | SUSE-SU-2025:0636-1 |
| SLES 15 SP4 | postgresql17 | 17.4-150200.5.10.1 | SUSE-SU-2025:0618-1 |
| SLES 15 SP3 | postgresql13 | 13.20-150200.5.69.1 | SUSE-SU-2025:0619-1 |
| SLES 15 SP3 | postgresql14 | 14.17-150200.5.55.1 | SUSE-SU-2025:0632-1 |
| SLES 15 SP3 | postgresql15 | 15.12-150200.5.38.1 | SUSE-SU-2025:0633-1 |
| SLES 15 SP3 | postgresql16 | 16.8-150200.5.26.1 | SUSE-SU-2025:0636-1 |
| SLES 15 SP3 | postgresql17 | 17.4-150200.5.10.1 | SUSE-SU-2025:0618-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | postgresql13 | 13.20-3.60.1 | SUSE-SU-2025:0606-1 |
| SLES 12 SP5 | postgresql14 | 14.17-3.54.1 | SUSE-SU-2025:0615-1 |
| SLES 12 SP5 | postgresql15 | 15.12-3.38.1 | SUSE-SU-2025:0634-1 |
| SLES 12 SP5 | postgresql16 | 16.8-3.26.1 | SUSE-SU-2025:0637-1 |
| SLES 12 SP5 | postgresql17 | 17.4-3.10.1 | SUSE-SU-2025:0655-1 |
| SLES for SAP 15 SP5 | postgresql14 | 14.17-150200.5.55.1 | SUSE-SU-2025:0632-1 |
| SLES for SAP 15 SP5 | postgresql15 | 15.12-150200.5.38.1 | SUSE-SU-2025:0633-1 |
| SLES for SAP 15 SP5 | postgresql16 | 16.8-150200.5.26.1 | SUSE-SU-2025:0636-1 |
| SLES for SAP 15 SP5 | postgresql17 | 17.4-150200.5.10.1 | SUSE-SU-2025:0618-1 |
| SLES for SAP 15 SP4 | postgresql13 | 13.20-150200.5.69.1 | SUSE-SU-2025:0619-1 |
| SLES for SAP 15 SP4 | postgresql14 | 14.17-150200.5.55.1 | SUSE-SU-2025:0632-1 |
| SLES for SAP 15 SP4 | postgresql15 | 15.12-150200.5.38.1 | SUSE-SU-2025:0633-1 |
| SLES for SAP 15 SP4 | postgresql16 | 16.8-150200.5.26.1 | SUSE-SU-2025:0636-1 |
| SLES for SAP 15 SP4 | postgresql17 | 17.4-150200.5.10.1 | SUSE-SU-2025:0618-1 |
| SLES for SAP 15 SP3 | postgresql13 | 13.20-150200.5.69.1 | SUSE-SU-2025:0619-1 |
| SLES for SAP 15 SP3 | postgresql14 | 14.17-150200.5.55.1 | SUSE-SU-2025:0632-1 |
| SLES for SAP 15 SP3 | postgresql15 | 15.12-150200.5.38.1 | SUSE-SU-2025:0633-1 |
| SLES for SAP 15 SP3 | postgresql16 | 16.8-150200.5.26.1 | SUSE-SU-2025:0636-1 |
| SLES for SAP 15 SP3 | postgresql17 | 17.4-150200.5.10.1 | SUSE-SU-2025:0618-1 |
| SLE HPC 15 SP5 | postgresql15 | 15.12-150200.5.38.1 | SUSE-SU-2025:0633-1 |
| SLE HPC 15 SP5 | postgresql16 | 16.8-150200.5.26.1 | SUSE-SU-2025:0636-1 |
| SLE HPC 15 SP5 | postgresql17 | 17.4-150200.5.10.1 | SUSE-SU-2025:0618-1 |
| SLE HPC 15 SP4 | postgresql13 | 13.20-150200.5.69.1 | SUSE-SU-2025:0619-1 |
| SLE HPC 15 SP4 | postgresql14 | 14.17-150200.5.55.1 | SUSE-SU-2025:0632-1 |
| SLE HPC 15 SP4 | postgresql15 | 15.12-150200.5.38.1 | SUSE-SU-2025:0633-1 |
| SLE HPC 15 SP4 | postgresql16 | 16.8-150200.5.26.1 | SUSE-SU-2025:0636-1 |
| SLE HPC 15 SP4 | postgresql17 | 17.4-150200.5.10.1 | SUSE-SU-2025:0618-1 |
| SLE HPC 15 SP3 | postgresql13 | 13.20-150200.5.69.1 | SUSE-SU-2025:0619-1 |
| SLE HPC 15 SP3 | postgresql14 | 14.17-150200.5.55.1 | SUSE-SU-2025:0632-1 |
| SLE HPC 15 SP3 | postgresql15 | 15.12-150200.5.38.1 | SUSE-SU-2025:0633-1 |
| SLE HPC 15 SP3 | postgresql16 | 16.8-150200.5.26.1 | SUSE-SU-2025:0636-1 |
| SLE HPC 15 SP3 | postgresql17 | 17.4-150200.5.10.1 | SUSE-SU-2025:0618-1 |
| SUSE Manager Server 4.3 | postgresql14 | 14.17-150200.5.55.1 | SUSE-SU-2025:0632-1 |
| SUSE Manager Server 4.3 | postgresql15 | 15.12-150200.5.38.1 | SUSE-SU-2025:0633-1 |
| SUSE Manager Server 4.3 | postgresql16 | 16.8-150200.5.26.1 | SUSE-SU-2025:0636-1 |
| SUSE Manager Server 4.3 | postgresql17 | 17.4-150200.5.10.1 | SUSE-SU-2025:0618-1 |
| SUSE Manager Proxy 4.3 | postgresql14 | 14.17-150200.5.55.1 | SUSE-SU-2025:0632-1 |
| SUSE Manager Proxy 4.3 | postgresql15 | 15.12-150200.5.38.1 | SUSE-SU-2025:0633-1 |
| SUSE Manager Proxy 4.3 | postgresql16 | 16.8-150200.5.26.1 | SUSE-SU-2025:0636-1 |
| SUSE Manager Proxy 4.3 | postgresql17 | 17.4-150200.5.10.1 | SUSE-SU-2025:0618-1 |
| SUSE Enterprise Storage 7.1 | postgresql13 | 13.20-150200.5.69.1 | SUSE-SU-2025:0619-1 |
| SUSE Enterprise Storage 7.1 | postgresql14 | 14.17-150200.5.55.1 | SUSE-SU-2025:0632-1 |
| SUSE Enterprise Storage 7.1 | postgresql15 | 15.12-150200.5.38.1 | SUSE-SU-2025:0633-1 |
| SUSE Enterprise Storage 7.1 | postgresql16 | 16.8-150200.5.26.1 | SUSE-SU-2025:0636-1 |
| SUSE Enterprise Storage 7.1 | postgresql17 | 17.4-150200.5.10.1 | SUSE-SU-2025:0618-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | postgresql13 | 13.19-1.1 | openSUSE-SU-2025:14805-1 |
| openSUSE Tumbleweed | postgresql14 | 14.16-1.1 | openSUSE-SU-2025:14806-1 |
| openSUSE Tumbleweed | postgresql15 | 15.11-1.1 | openSUSE-SU-2025:14807-1 |
| openSUSE Tumbleweed | postgresql16 | 16.7-1.1 | openSUSE-SU-2025:14808-1 |
| openSUSE Tumbleweed | postgresql17 | 17.3-1.1 | openSUSE-SU-2025:14810-1 |
| openSUSE Leap 15.6 | postgresql13 | 13.20-150600.14.5.2 | SUSE-SU-2025:0737-1 |
| openSUSE Leap 15.6 | postgresql14 | 14.17-150600.16.14.1 | SUSE-SU-2025:0631-1 |
| openSUSE Leap 15.6 | postgresql15 | 15.12-150600.16.14.1 | SUSE-SU-2025:0614-1 |
| openSUSE Leap 15.6 | postgresql16 | 16.8-150600.16.15.1 | SUSE-SU-2025:0635-1 |
| openSUSE Leap 15.6 | postgresql17 | 17.4-150600.13.10.1 | SUSE-SU-2025:0616-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | postgresql16 | 16.8-r0 | — |
| Alpine v3.24 | postgresql17 | 17.4-r0 | — |
| Alpine v3.23 | postgresql16 | 16.8-r0 | — |
| Alpine v3.23 | postgresql17 | 17.4-r0 | — |
| Alpine v3.22 | postgresql15 | 15.11-r0 | — |
| Alpine v3.22 | postgresql16 | 16.8-r0 | — |
| Alpine v3.22 | postgresql17 | 17.4-r0 | — |
| Alpine v3.21 | postgresql15 | 15.11-r0 | — |
| Alpine v3.21 | postgresql16 | 16.8-r0 | — |
| Alpine v3.21 | postgresql17 | 17.4-r0 | — |
| Alpine v3.20 | postgresql14 | 14.17-r0 | — |
| Alpine v3.20 | postgresql15 | 15.11-r0 | — |
| Alpine v3.20 | postgresql16 | 16.8-r0 | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | postgresql13 | 13.20-r0 | — |
| Alpine v3.19 | postgresql14 | 14.17-r0 | — |
| Alpine v3.19 | postgresql15 | 15.11-r0 | — |
| Alpine v3.19 | postgresql16 | 16.8-r0 | — |
| Alpine v3.18 | postgresql13 | 13.20-r0 | — |
| Alpine v3.18 | postgresql14 | 14.17-r0 | — |
| Alpine v3.18 | postgresql15 | 15.11-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | libpq +17 | 16.8-1.amzn2023.0.1 | ALAS2023-2025-870, ALAS2023-2025-868 |
| Amazon Linux 2023 | postgresql15 +15 | 15.12-1.amzn2023.0.1 | ALAS2023-2025-869 |
| Amazon Linux 2 | postgresql +11 | 9.2.24-8.amzn2.0.6 | ALAS2-2025-2866 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | postgresql | 16.7-1 | — |
| Azure Linux 2 (CBL-Mariner) | postgresql | 14.16-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | libpq +16 | 13.20-1.el9_5 | ELSA-2025-1743, ELSA-2025-1742, ELSA-2025-1741 |
| Oracle Linux 9 | pg_repack | 1.4.8-2.module+el9.5.0+90424+300303e9 | ELSA-2025-1743, ELSA-2025-1741 |
| Oracle Linux 9 | pgaudit | 1.7.0-1.module+el9.2.0+21134+ceb95ed9 | ELSA-2025-1743, ELSA-2025-1741 |
| Oracle Linux 9 | pgvector | 0.6.2-1.module+el9.5.0+90425+0820a3c3 | ELSA-2025-1743 |
| Oracle Linux 9 | postgres-decoderbufs | 1.9.7-1.Final.module+el9.2.0+21134+ceb95ed9 | ELSA-2025-1743, ELSA-2025-1741 |
| Oracle Linux 8 | libpq +1 | 13.20-1.el8_10 | ELSA-2025-1737 |
| Oracle Linux 8 | pg_repack | 1.4.6-3.module+el8.9.0+90098+1560b6c2 | ELSA-2025-3082, ELSA-2025-1740, ELSA-2025-1739 |
| Oracle Linux 8 | pgaudit | 1.4.0-7.module+el8.10.0+90397+67dad74f | ELSA-2025-3082, ELSA-2025-1740, ELSA-2025-1739 |
| Oracle Linux 8 | postgres-decoderbufs | 0.10.0-2.module+el8.9.0+90098+1560b6c2 | ELSA-2025-3082, ELSA-2025-1740, ELSA-2025-1739 |
| Oracle Linux 8 | postgresql +12 | 12.22-3.module+el8.10.0+90540+03ca8735 | ELSA-2025-3082, ELSA-2025-1740, ELSA-2025-1739 |
| Oracle Linux 8 | postgresql-private-libs +1 | 15.12-1.module+el8.10.0+90529+917d02ef | ELSA-2025-1740, ELSA-2025-1739 |
| Oracle Linux 7 | postgresql +11 | 9.2.24-9.0.5.el7_9 | ELSA-2025-3978 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | postgresql-12 | No fix yet | — |
| Wolfi rolling | postgresql-13 | 13.20-r0 | — |
| Wolfi rolling | postgresql-14 | 14.17-r0 | — |
| Wolfi rolling | postgresql-14-client | 14.24-r2 | — |
| Wolfi rolling | postgresql-15 | 15.12-r0 | — |
| Wolfi rolling | postgresql-15-client | 15.19-r2 | — |
| Wolfi rolling | postgresql-16 | 16.8-r0 | — |
| Wolfi rolling | postgresql-17 | 17.4-r0 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) unauthenticated Remote Code Execution
exploit/linux/http/beyondtrust_pra_rs_unauth_rce
GitHub 7 repositories
-
soltanali0/CVE-2025-1094-Exploit ★ 39 · Feb 27, 2025
WebSocket and SQL Injection Exploit Script
-
ishwardeepp/CVE-2025-1094-PoC-Postgre-SQLi ★ 6 · Mar 14, 2025
-
skraft9/CVE-2024-12356 ★ 2 · Sep 4, 2026
Unauthenticated RCE detector + RCA for BeyondTrust Remote Support / PRA (CVE-2024-12356 + CVE-2025-1094)
-
aninfosec/CVE-2025-1094 ★ 1 · Jun 18, 2025
It is an input sanitization flaw caused by an encoding mismatch, allowing crafted input to bypass filters. If a server is vulnerable, an attacker can inject malicious SQL that the backend executes.
-
dexteon/cve-2025-1094-poc ★ 0 · Nov 12, 2026
Research notes for cve-2025-1094-poc
-
TranDongA3/POC-CVE-2025-1094 ★ 0 · May 10, 2026
-
PinkArmor/CVE-2025-1094-Lab-Setup ★ 0 · Oct 19, 2025
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 50
- ALSA-2025:1741 Important: postgresql:15 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1742 Important: postgresql security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1743 Important: postgresql:16 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1738 Important: libpq security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1740 Important: postgresql:16 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:3082 Important: postgresql:12 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1736 Important: postgresql:13 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1737 Important: libpq security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1739 Important: postgresql:15 security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2025-0372 PostgreSQL: Schwachstelle ermöglicht SQL Injection und Codeausführung BSI CERT-Bund (WID) · Oct 21, 2026
- WID-SEC-2025-1439 Dell Secure Connect Gateway: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Oct 11, 2026
- RHSA-2025:3978 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:3064 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:3082 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:3062 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:3063 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:3050 Red Hat Security Advisory: postgresql:12 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1745 Red Hat Security Advisory: libpq security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1744 Red Hat Security Advisory: libpq security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1743 Red Hat Security Advisory: postgresql:16 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1742 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1740 Red Hat Security Advisory: postgresql:16 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1741 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1738 Red Hat Security Advisory: libpq security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1739 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1737 Red Hat Security Advisory: libpq security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1735 Red Hat Security Advisory: libpq security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1736 Red Hat Security Advisory: postgresql:13 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1732 Red Hat Security Advisory: libpq security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1733 Red Hat Security Advisory: libpq security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1731 Red Hat Security Advisory: postgresql:16 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1729 Red Hat Security Advisory: postgresql:13 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1730 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1728 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1727 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1725 Red Hat Security Advisory: libpq security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1726 Red Hat Security Advisory: postgresql security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1723 Red Hat Security Advisory: postgresql:13 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1724 Red Hat Security Advisory: postgresql:13 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1722 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1720 Red Hat Security Advisory: libpq security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- RHSA-2025:1721 Red Hat Security Advisory: postgresql:15 security update Red Hat Security Advisories (RHSA) · Jul 12, 2026
- USN-7315-2 postgresql-10 vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-7315-1 postgresql-12, postgresql-14, postgresql-16 vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- SUSE-SU-2025:00614-1 Security update for postgresql15 SUSE / openSUSE Security Updates · Mar 23, 2026
- DLA-4052-1 postgresql-13 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-4052-2 postgresql-13 - regression update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2025:1736 Important: postgresql:13 security update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2025:1737 Important: libpq security update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2025:0637-1 Security update for postgresql16 SUSE / openSUSE Security Updates · Feb 4, 2026