Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-4207 EUVD-2025-14007GHSA-6x46-2273-xjjf

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

Published May 8, 2025 · Updated May 9, 2025 · Assigned by PostgreSQL

Description

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

Affected products

VendorProductAffectedFixed
— PostgreSQL 17 – < 17.5, 16 – < 16.9, 15 – < 15.13, 14 – < 14.18, < 13.21 17.5

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 13 postgresql-17 17.5-1 —
Debian 12 postgresql-15 15.13-0+deb12u1 —
Debian 11 postgresql-13 13.21-0+deb11u1 DLA-4159-1
ReleasePackageFixed inAdvisory
Ubuntu 25.04 postgresql-17 17.5-0ubuntu0.25.04.1 USN-7520-2
Ubuntu 24.04 LTS postgresql-16 16.9-0ubuntu0.24.04.1 USN-7520-1
Ubuntu 22.04 LTS postgresql-14 14.18-0ubuntu0.22.04.1 USN-7520-1
Ubuntu 20.04 LTS postgresql-12 12.22-0ubuntu0.20.04.4 USN-7520-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS postgresql-10 No fix yet —
Ubuntu Pro 16.04 LTS postgresql-9.5 No fix yet —
Ubuntu Pro 14.04 LTS postgresql-9.3 No fix yet —
ReleasePackageFixed inAdvisory
RHEL 10 postgresql +15 16.10-1.el10_0 RHSA-2025:14826
RHEL 9 pg_repack 1.4.8-2.module+el9.5.0+22224+f5585c78 RHSA-2025:14862, RHSA-2025:14827
RHEL 9 pgaudit 1.7.0-1.module+el9.2.0+17405+aeb9ec60 RHSA-2025:14862, RHSA-2025:14827
RHEL 9 pgvector 0.6.2-2.module+el9.6.0+22979+c3d78d52 RHSA-2025:14827
RHEL 9 postgres-decoderbufs 1.9.7-1.Final.module+el9.2.0+17405+aeb9ec60 RHSA-2025:14862, RHSA-2025:14827
RHEL 9 postgresql +14 15.14-1.module+el9.6.0+23419+7863ab62 RHSA-2025:14862, RHSA-2025:14827
RHEL 8 pg_repack 1.4.6-3.module+el8.9.0+20664+9c30cf7f RHSA-2025:15022, RHSA-2025:15021, RHSA-2025:14899
RHEL 8 pgaudit 1.5.0-1.module+el8.9.0+20664+9c30cf7f RHSA-2025:15022, RHSA-2025:15021, RHSA-2025:14899
RHEL 8 postgres-decoderbufs 0.10.0-2.module+el8.9.0+20664+9c30cf7f RHSA-2025:15022, RHSA-2025:15021, RHSA-2025:14899
RHEL 8 postgresql +12 13.22-1.module+el8.10.0+23422+b659575f RHSA-2025:15022, RHSA-2025:15021, RHSA-2025:14899
RHEL 8 postgresql-private-libs +1 15.14-1.module+el8.10.0+23423+5a199198 RHSA-2025:15022, RHSA-2025:14899

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 postgresql-test-rpm-macros 16.10-1.el10_0 ALSA-2025:14826
AlmaLinux 9 pg_repack 1.4.8-2.module_el9.5.0+119+18833d03 ALSA-2025:14862, ALSA-2025:14827
AlmaLinux 9 pgaudit 1.7.0-1.module_el9.3.0+52+21733919 ALSA-2025:14862, ALSA-2025:14827
AlmaLinux 9 pgvector 0.6.2-2.module_el9.6.0+167+4e561146 ALSA-2025:14827
AlmaLinux 9 postgres-decoderbufs 1.9.7-1.Final.module_el9.3.0+52+21733919 ALSA-2025:14862, ALSA-2025:14827
AlmaLinux 9 postgresql +14 15.14-1.module_el9.6.0+176+c508cfa2 ALSA-2025:14862, ALSA-2025:14827
AlmaLinux 8 pg_repack 1.4.6-3.module_el8.6.0+2760+1746ec94 ALSA-2025:15022, ALSA-2025:15021, ALSA-2025:14899
AlmaLinux 8 pgaudit 1.5.0-1.module_el8.6.0+2760+1746ec94 ALSA-2025:15022, ALSA-2025:15021, ALSA-2025:14899
AlmaLinux 8 postgres-decoderbufs 0.10.0-2.module_el8.6.0+2760+1746ec94 ALSA-2025:15022, ALSA-2025:15021, ALSA-2025:14899
AlmaLinux 8 postgresql +12 13.22-1.module_el8.10.0+4042+cb252986 ALSA-2025:15022, ALSA-2025:15021, ALSA-2025:14899
AlmaLinux 8 postgresql-private-libs +1 15.14-1.module_el8.10.0+4041+afd30bb4 ALSA-2025:15022, ALSA-2025:14899
ReleasePackageFixed inAdvisory
SLES 15 SP7 postgresql14 14.18-150600.16.17.1 SUSE-SU-2025:01661-2
SLES 15 SP7 postgresql15 15.13-150600.16.17.1 SUSE-SU-2025:01748-2
SLES 15 SP7 postgresql16 16.9-150600.16.18.1 SUSE-SU-2025:01766-2
SLES 15 SP7 postgresql17 17.5-150600.13.13.1 SUSE-SU-2025:01644-2
SLES 15 SP6 postgresql14 14.18-150600.16.17.1 SUSE-SU-2025:01661-1
SLES 15 SP6 postgresql15 15.13-150600.16.17.1 SUSE-SU-2025:01748-1
SLES 15 SP6 postgresql16 16.9-150600.16.18.1 SUSE-SU-2025:01766-1
SLES 15 SP6 postgresql17 17.5-150600.13.13.1 SUSE-SU-2025:01644-1
SLES 15 SP5 postgresql14 14.18-150200.5.58.1 SUSE-SU-2025:01786-2, SUSE-SU-2025:01786-1
SLES 15 SP5 postgresql15 15.13-150200.5.41.1 SUSE-SU-2025:01785-1
SLES 15 SP5 postgresql16 16.9-150200.5.29.1 SUSE-SU-2025:01782-2, SUSE-SU-2025:01782-1
SLES 15 SP5 postgresql17 17.5-150200.5.13.1 SUSE-SU-2025:01783-2, SUSE-SU-2025:01783-1
SLES 15 SP4 postgresql13 13.21-150200.5.72.1 SUSE-SU-2025:01705-1
SLES 15 SP4 postgresql14 14.18-150200.5.58.1 SUSE-SU-2025:01786-2, SUSE-SU-2025:01786-1
SLES 15 SP4 postgresql15 15.13-150200.5.41.1 SUSE-SU-2025:01785-1
SLES 15 SP4 postgresql16 16.9-150200.5.29.1 SUSE-SU-2025:01782-2, SUSE-SU-2025:01782-1
SLES 15 SP4 postgresql17 17.5-150200.5.13.1 SUSE-SU-2025:01783-1
SLES 15 SP3 postgresql13 13.21-150200.5.72.1 SUSE-SU-2025:01705-1
SLES 15 SP3 postgresql14 14.18-150200.5.58.1 SUSE-SU-2025:01786-2, SUSE-SU-2025:01786-1
SLES 15 SP3 postgresql15 15.13-150200.5.41.1 SUSE-SU-2025:01785-1
SLES 15 SP3 postgresql16 16.9-150200.5.29.1 SUSE-SU-2025:01782-1
SLES 15 SP3 postgresql17 17.5-150200.5.13.1 SUSE-SU-2025:01783-1
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 postgresql13 13.21-3.63.1 SUSE-SU-2025:01750-1
SLES 12 SP5 postgresql14 14.18-3.57.1 SUSE-SU-2025:01772-1
SLES 12 SP5 postgresql15 15.13-3.41.1 SUSE-SU-2025:01749-1
SLES 12 SP5 postgresql16 16.9-3.29.1 SUSE-SU-2025:01767-1
SLES 12 SP5 postgresql17 17.5-3.13.1 SUSE-SU-2025:01765-1
SLES for SAP 15 SP5 postgresql14 14.18-150200.5.58.1 SUSE-SU-2025:01786-1
SLES for SAP 15 SP5 postgresql15 15.13-150200.5.41.1 SUSE-SU-2025:01785-1
SLES for SAP 15 SP5 postgresql16 16.9-150200.5.29.1 SUSE-SU-2025:01782-1
SLES for SAP 15 SP5 postgresql17 17.5-150200.5.13.1 SUSE-SU-2025:01783-1
SLES for SAP 15 SP4 postgresql13 13.21-150200.5.72.1 SUSE-SU-2025:01705-1
SLES for SAP 15 SP4 postgresql14 14.18-150200.5.58.1 SUSE-SU-2025:01786-1
SLES for SAP 15 SP4 postgresql15 15.13-150200.5.41.1 SUSE-SU-2025:01785-1
SLES for SAP 15 SP4 postgresql16 16.9-150200.5.29.1 SUSE-SU-2025:01782-1
SLES for SAP 15 SP4 postgresql17 17.5-150200.5.13.1 SUSE-SU-2025:01783-1
SLES for SAP 15 SP3 postgresql13 13.21-150200.5.72.1 SUSE-SU-2025:01705-1
SLES for SAP 15 SP3 postgresql14 14.18-150200.5.58.1 SUSE-SU-2025:01786-1
SLES for SAP 15 SP3 postgresql15 15.13-150200.5.41.1 SUSE-SU-2025:01785-1
SLES for SAP 15 SP3 postgresql16 16.9-150200.5.29.1 SUSE-SU-2025:01782-1
SLES for SAP 15 SP3 postgresql17 17.5-150200.5.13.1 SUSE-SU-2025:01783-1
SLE HPC 15 SP5 postgresql15 15.13-150200.5.41.1 SUSE-SU-2025:01785-1
SLE HPC 15 SP5 postgresql16 16.9-150200.5.29.1 SUSE-SU-2025:01782-1
SLE HPC 15 SP5 postgresql17 17.5-150200.5.13.1 SUSE-SU-2025:01783-1
SLE HPC 15 SP4 postgresql13 13.21-150200.5.72.1 SUSE-SU-2025:01705-1
SLE HPC 15 SP4 postgresql14 14.18-150200.5.58.1 SUSE-SU-2025:01786-1
SLE HPC 15 SP4 postgresql15 15.13-150200.5.41.1 SUSE-SU-2025:01785-1
SLE HPC 15 SP4 postgresql16 16.9-150200.5.29.1 SUSE-SU-2025:01782-1
SLE HPC 15 SP4 postgresql17 17.5-150200.5.13.1 SUSE-SU-2025:01783-1
SLE HPC 15 SP3 postgresql13 13.21-150200.5.72.1 SUSE-SU-2025:01705-1
SLE HPC 15 SP3 postgresql14 14.18-150200.5.58.1 SUSE-SU-2025:01786-1
SLE HPC 15 SP3 postgresql15 15.13-150200.5.41.1 SUSE-SU-2025:01785-1
SLE HPC 15 SP3 postgresql16 16.9-150200.5.29.1 SUSE-SU-2025:01782-1
SLE HPC 15 SP3 postgresql17 17.5-150200.5.13.1 SUSE-SU-2025:01783-1
SUSE Manager Server 4.3 postgresql14 14.18-150200.5.58.1 SUSE-SU-2025:01786-1
SUSE Manager Server 4.3 postgresql15 15.13-150200.5.41.1 SUSE-SU-2025:01785-1
SUSE Manager Server 4.3 postgresql16 16.9-150200.5.29.1 SUSE-SU-2025:01782-1
SUSE Manager Server 4.3 postgresql17 17.5-150200.5.13.1 SUSE-SU-2025:01783-1
SUSE Manager Proxy 4.3 postgresql14 14.18-150200.5.58.1 SUSE-SU-2025:01786-1
SUSE Manager Proxy 4.3 postgresql15 15.13-150200.5.41.1 SUSE-SU-2025:01785-1
SUSE Manager Proxy 4.3 postgresql16 16.9-150200.5.29.1 SUSE-SU-2025:01782-1
SUSE Manager Proxy 4.3 postgresql17 17.5-150200.5.13.1 SUSE-SU-2025:01783-1
SUSE Enterprise Storage 7.1 postgresql13 13.21-150200.5.72.1 SUSE-SU-2025:01705-1
SUSE Enterprise Storage 7.1 postgresql14 14.18-150200.5.58.1 SUSE-SU-2025:01786-1
SUSE Enterprise Storage 7.1 postgresql15 15.13-150200.5.41.1 SUSE-SU-2025:01785-1
SUSE Enterprise Storage 7.1 postgresql16 16.9-150200.5.29.1 SUSE-SU-2025:01782-1
SUSE Enterprise Storage 7.1 postgresql17 17.5-150200.5.13.1 SUSE-SU-2025:01783-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed postgresql13 13.21-1.1 openSUSE-SU-2025:15137-1
openSUSE Tumbleweed postgresql14 14.18-1.1 openSUSE-SU-2025:15138-1
openSUSE Tumbleweed postgresql15 15.13-1.1 openSUSE-SU-2025:15139-1
openSUSE Tumbleweed postgresql16 16.9-1.1 openSUSE-SU-2025:15140-1
openSUSE Tumbleweed postgresql17 17.5-1.1 openSUSE-SU-2025:15151-1
openSUSE Leap 15.6 postgresql13 13.21-150600.14.8.1 SUSE-SU-2025:01654-1
openSUSE Leap 15.6 postgresql14 14.18-150600.16.17.1 SUSE-SU-2025:01661-1
openSUSE Leap 15.6 postgresql15 15.13-150600.16.17.1 SUSE-SU-2025:01748-1
openSUSE Leap 15.6 postgresql16 16.9-150600.16.18.1 SUSE-SU-2025:01766-1
openSUSE Leap 15.6 postgresql17 17.5-150600.13.13.1 SUSE-SU-2025:01644-1
ReleasePackageFixed inAdvisory
Alpine v3.24 postgresql16 16.9-r0 —
Alpine v3.24 postgresql17 17.5-r0 —
Alpine v3.23 postgresql16 16.9-r0 —
Alpine v3.23 postgresql17 17.5-r0 —
Alpine v3.22 postgresql15 15.13-r0 —
Alpine v3.22 postgresql16 16.9-r0 —
Alpine v3.22 postgresql17 17.5-r0 —
Alpine v3.21 postgresql15 15.13-r0 —
Alpine v3.21 postgresql16 16.9-r0 —
Alpine v3.21 postgresql17 17.5-r0 —
Alpine v3.20 postgresql15 15.13-r0 —
Alpine v3.20 postgresql16 16.9-r0 —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 postgresql15 15.13-r0 —
Alpine v3.19 postgresql16 16.9-r0 —
Alpine v3.18 postgresql14 14.18-r0 —
Alpine v3.18 postgresql15 15.13-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 postgresql15 +15 15.13-1.amzn2023.0.1 ALAS2023-2025-974
Amazon Linux 2023 postgresql16 +15 16.9-1.amzn2023.0.1 ALAS2023-2025-973
Amazon Linux 2023 postgresql17 +15 17.5-1.amzn2023.0.1 ALAS2023-2025-975
Amazon Linux 2 postgresql +11 9.2.24-8.amzn2.0.7 ALAS2-2025-2902

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 postgresql 16.9-1 —
Azure Linux 3 rust 1.90.0-4 —
Azure Linux 2 (CBL-Mariner) postgresql 14.18-1 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling postgresql-12 No fix yet —

Advisories 49

References