DeutschShown in its original language — a full translation is planned for a future version.
PostgreSQL: Mehrere Schwachstellen
view advisory published 2025-08-14
Ein Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um Informationen offenzulegen, und um beliebigen Programmcode auszuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-8715US | — | — | ||
Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system a… | ||||
| CVE-2025-8714US | — | Exploit | ||
Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating syst… | ||||
| CVE-2025-8713US | — | — | ||
PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row se… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2025-14899 vom 2025-08-29external
- Oracle Linux Security Advisory ELSA-2026-28999 vom 2026-06-26external
- Oracle Linux Security Advisory ELSA-2026-4064 vom 2026-03-11external
- Red Hat Security Advisory RHSA-2025:14826 vom 2025-08-28external
- Red Hat Security Advisory RHSA-2025:14827 vom 2025-08-28external
- Red Hat Security Advisory RHSA-2025:14862 vom 2025-08-28external
- Red Hat Security Advisory RHSA-2025:14869 vom 2025-08-28external
- Red Hat Security Advisory RHSA-2025:14870 vom 2025-08-28external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan