CVE-2025-8713 — PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

Affected: PostgreSQL

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this data is consulted during the query planning process. Prior to this release, a user could craft a leaky operator that bypassed view access control lists (ACLs) and bypassed row security policies in partitioning or table inheritance hierarchies. Reachable statistics data notably included histograms and most-common-values lists. CVE-2017-7484 and CVE-2019-10130 intended to close this class of vulnerability, but this gap remained. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are affected.

USN-7741-1 — postgresql-14, postgresql-16, postgresql-17 vulnerabilities

Affected: Ubuntu:22.04:LTS: postgresql-14, Ubuntu:24.04:LTS: postgresql-16

Dean Rasheed discovered that PostgreSQL incorrectly handled access control lists. An attacker could possibly use this issue to obtain sensitive information. (CVE-2025-8713)

Martin Rakhmanov, Matthieu Denais, and RyotaK discovered that the PostgreSQL pg_dump utility allowed untrusted data inclusion. A malicious superuser could use this issue to execute arbitrary code when a dump script is reloaded. (CVE-2025-8714)

Noah Misch discovered that the PostgreSQL pg_dump utility incorrectly filtered line breaks in object names. An attacker could create object names that execute arbitrary SQL commands when a dump script is reloaded. (CVE-2025-8715)

Most recent entries from all

CVE-2025-8713 — PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

USN-7741-1 — postgresql-14, postgresql-16, postgresql-17 vulnerabilities