Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands inside a purpose-crafted object name. The same attacks can achieve SQL injection as a superuser of the restore target server. pg_dumpall, pg_restore, and pg_upgrade are also affected. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are affected. Versions before 11.20 are unaffected. CVE-2012-0868 had fixed this class of problem, but version 11.20 reintroduced it.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-pg_repackalma-upgrade-pgauditalma-upgrade-pgvectoralma-upgrade-postgres-decoderbufsalma-upgrade-postgresqlalma-upgrade-postgresql-contribalma-upgrade-postgresql-docsalma-upgrade-postgresql-plperlalma-upgrade-postgresql-plpython3alma-upgrade-postgresql-pltclalma-upgrade-postgresql-private-develalma-upgrade-postgresql-private-libsalma-upgrade-postgresql-serveralma-upgrade-postgresql-server-develalma-upgrade-postgresql-staticalma-upgrade-postgresql-testalma-upgrade-postgresql-test-rpm-macrosalma-upgrade-postgresql-upgradealma-upgrade-postgresql-upgrade-devel | Sep 1, 2025 | Aug 28, 2025 | |
| Alpine Linux | alpine-linux-upgrade-postgresql15alpine-linux-upgrade-postgresql16alpine-linux-upgrade-postgresql17 | Aug 18, 2025 | Aug 14, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-postgresqlamazon-linux-ami-2-upgrade-postgresql-contribamazon-linux-ami-2-upgrade-postgresql-debuginfoamazon-linux-ami-2-upgrade-postgresql-docsamazon-linux-ami-2-upgrade-postgresql-llvmjitamazon-linux-ami-2-upgrade-postgresql-plperlamazon-linux-ami-2-upgrade-postgresql-plpython3amazon-linux-ami-2-upgrade-postgresql-pltclamazon-linux-ami-2-upgrade-postgresql-private-develamazon-linux-ami-2-upgrade-postgresql-private-libsamazon-linux-ami-2-upgrade-postgresql-serveramazon-linux-ami-2-upgrade-postgresql-server-develamazon-linux-ami-2-upgrade-postgresql-staticamazon-linux-ami-2-upgrade-postgresql-testamazon-linux-ami-2-upgrade-postgresql-test-rpm-macrosamazon-linux-ami-2-upgrade-postgresql-upgradeamazon-linux-ami-2-upgrade-postgresql-upgrade-devel | May 20, 2026 | May 20, 2026 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-postgresql15amazon-linux-2023-upgrade-postgresql15-contribamazon-linux-2023-upgrade-postgresql15-contrib-debuginfoamazon-linux-2023-upgrade-postgresql15-debuginfoamazon-linux-2023-upgrade-postgresql15-debugsourceamazon-linux-2023-upgrade-postgresql15-docsamazon-linux-2023-upgrade-postgresql15-docs-debuginfoamazon-linux-2023-upgrade-postgresql15-llvmjitamazon-linux-2023-upgrade-postgresql15-llvmjit-debuginfoamazon-linux-2023-upgrade-postgresql15-plperlamazon-linux-2023-upgrade-postgresql15-plperl-debuginfoamazon-linux-2023-upgrade-postgresql15-plpython3amazon-linux-2023-upgrade-postgresql15-plpython3-debuginfoamazon-linux-2023-upgrade-postgresql15-pltclamazon-linux-2023-upgrade-postgresql15-pltcl-debuginfoamazon-linux-2023-upgrade-postgresql15-private-develamazon-linux-2023-upgrade-postgresql15-private-libsamazon-linux-2023-upgrade-postgresql15-private-libs-debuginfoamazon-linux-2023-upgrade-postgresql15-serveramazon-linux-2023-upgrade-postgresql15-server-debuginfoamazon-linux-2023-upgrade-postgresql15-server-develamazon-linux-2023-upgrade-postgresql15-server-devel-debuginfoamazon-linux-2023-upgrade-postgresql15-staticamazon-linux-2023-upgrade-postgresql15-testamazon-linux-2023-upgrade-postgresql15-test-debuginfoamazon-linux-2023-upgrade-postgresql15-test-rpm-macrosamazon-linux-2023-upgrade-postgresql15-upgradeamazon-linux-2023-upgrade-postgresql15-upgrade-debuginfoamazon-linux-2023-upgrade-postgresql15-upgrade-develamazon-linux-2023-upgrade-postgresql15-upgrade-devel-debuginfoamazon-linux-2023-upgrade-postgresql16amazon-linux-2023-upgrade-postgresql16-contribamazon-linux-2023-upgrade-postgresql16-contrib-debuginfoamazon-linux-2023-upgrade-postgresql16-debuginfoamazon-linux-2023-upgrade-postgresql16-debugsourceamazon-linux-2023-upgrade-postgresql16-docsamazon-linux-2023-upgrade-postgresql16-docs-debuginfoamazon-linux-2023-upgrade-postgresql16-llvmjitamazon-linux-2023-upgrade-postgresql16-llvmjit-debuginfoamazon-linux-2023-upgrade-postgresql16-plperlamazon-linux-2023-upgrade-postgresql16-plperl-debuginfoamazon-linux-2023-upgrade-postgresql16-plpython3amazon-linux-2023-upgrade-postgresql16-plpython3-debuginfoamazon-linux-2023-upgrade-postgresql16-pltclamazon-linux-2023-upgrade-postgresql16-pltcl-debuginfoamazon-linux-2023-upgrade-postgresql16-private-develamazon-linux-2023-upgrade-postgresql16-private-libsamazon-linux-2023-upgrade-postgresql16-private-libs-debuginfoamazon-linux-2023-upgrade-postgresql16-serveramazon-linux-2023-upgrade-postgresql16-server-debuginfoamazon-linux-2023-upgrade-postgresql16-server-develamazon-linux-2023-upgrade-postgresql16-server-devel-debuginfoamazon-linux-2023-upgrade-postgresql16-staticamazon-linux-2023-upgrade-postgresql16-testamazon-linux-2023-upgrade-postgresql16-test-debuginfoamazon-linux-2023-upgrade-postgresql16-test-rpm-macrosamazon-linux-2023-upgrade-postgresql16-upgradeamazon-linux-2023-upgrade-postgresql16-upgrade-debuginfoamazon-linux-2023-upgrade-postgresql16-upgrade-develamazon-linux-2023-upgrade-postgresql16-upgrade-devel-debuginfoamazon-linux-2023-upgrade-postgresql17amazon-linux-2023-upgrade-postgresql17-contribamazon-linux-2023-upgrade-postgresql17-contrib-debuginfoamazon-linux-2023-upgrade-postgresql17-debuginfoamazon-linux-2023-upgrade-postgresql17-debugsourceamazon-linux-2023-upgrade-postgresql17-docsamazon-linux-2023-upgrade-postgresql17-docs-debuginfoamazon-linux-2023-upgrade-postgresql17-llvmjitamazon-linux-2023-upgrade-postgresql17-llvmjit-debuginfoamazon-linux-2023-upgrade-postgresql17-plperlamazon-linux-2023-upgrade-postgresql17-plperl-debuginfoamazon-linux-2023-upgrade-postgresql17-plpython3amazon-linux-2023-upgrade-postgresql17-plpython3-debuginfoamazon-linux-2023-upgrade-postgresql17-pltclamazon-linux-2023-upgrade-postgresql17-pltcl-debuginfoamazon-linux-2023-upgrade-postgresql17-private-develamazon-linux-2023-upgrade-postgresql17-private-libsamazon-linux-2023-upgrade-postgresql17-private-libs-debuginfoamazon-linux-2023-upgrade-postgresql17-serveramazon-linux-2023-upgrade-postgresql17-server-debuginfoamazon-linux-2023-upgrade-postgresql17-server-develamazon-linux-2023-upgrade-postgresql17-server-devel-debuginfoamazon-linux-2023-upgrade-postgresql17-staticamazon-linux-2023-upgrade-postgresql17-testamazon-linux-2023-upgrade-postgresql17-test-debuginfoamazon-linux-2023-upgrade-postgresql17-test-rpm-macrosamazon-linux-2023-upgrade-postgresql17-upgradeamazon-linux-2023-upgrade-postgresql17-upgrade-debuginfoamazon-linux-2023-upgrade-postgresql17-upgrade-develamazon-linux-2023-upgrade-postgresql17-upgrade-devel-debuginfo | Sep 9, 2025 | Aug 14, 2025 | |
| Debian | debian-upgrade-postgresql-13debian-upgrade-postgresql-15 | Aug 18, 2025 | Aug 18, 2025 | |
| Freebsd | freebsd-upgrade-package-postgresql17-serverfreebsd-upgrade-package-postgresql16-serverfreebsd-upgrade-package-postgresql15-serverfreebsd-upgrade-package-postgresql14-serverfreebsd-upgrade-package-postgresql13-server | Dec 10, 2025 | Aug 14, 2025 | |
| Oracle_linux | oracle-linux-upgrade-pgauditoracle-linux-upgrade-pg-repackoracle-linux-upgrade-pgvectororacle-linux-upgrade-postgres-decoderbufsoracle-linux-upgrade-postgresqloracle-linux-upgrade-postgresql-contriboracle-linux-upgrade-postgresql-docsoracle-linux-upgrade-postgresql-plperloracle-linux-upgrade-postgresql-plpython3oracle-linux-upgrade-postgresql-pltcloracle-linux-upgrade-postgresql-private-develoracle-linux-upgrade-postgresql-private-libsoracle-linux-upgrade-postgresql-serveroracle-linux-upgrade-postgresql-server-develoracle-linux-upgrade-postgresql-staticoracle-linux-upgrade-postgresql-testoracle-linux-upgrade-postgresql-test-rpm-macrosoracle-linux-upgrade-postgresql-upgradeoracle-linux-upgrade-postgresql-upgrade-devel | Sep 2, 2025 | Aug 14, 2025 | |
| Postgres | postgres-upgrade-14_19postgres-upgrade-15_14postgres-upgrade-16_10postgres-upgrade-17_6postgres-upgrade-latest | Aug 15, 2025 | Aug 14, 2025 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-pg_repackredhat-upgrade-pg_repack-debuginforedhat-upgrade-pg_repack-debugsourceredhat-upgrade-pgauditredhat-upgrade-pgaudit-debuginforedhat-upgrade-pgaudit-debugsourceredhat-upgrade-pgvectorredhat-upgrade-pgvector-debuginforedhat-upgrade-pgvector-debugsourceredhat-upgrade-postgres-decoderbufsredhat-upgrade-postgres-decoderbufs-debuginforedhat-upgrade-postgres-decoderbufs-debugsourceredhat-upgrade-postgresqlredhat-upgrade-postgresql-contribredhat-upgrade-postgresql-contrib-debuginforedhat-upgrade-postgresql-debuginforedhat-upgrade-postgresql-debugsourceredhat-upgrade-postgresql-docsredhat-upgrade-postgresql-docs-debuginforedhat-upgrade-postgresql-plperlredhat-upgrade-postgresql-plperl-debuginforedhat-upgrade-postgresql-plpython3redhat-upgrade-postgresql-plpython3-debuginforedhat-upgrade-postgresql-pltclredhat-upgrade-postgresql-pltcl-debuginforedhat-upgrade-postgresql-private-develredhat-upgrade-postgresql-private-libsredhat-upgrade-postgresql-private-libs-debuginforedhat-upgrade-postgresql-serverredhat-upgrade-postgresql-server-debuginforedhat-upgrade-postgresql-server-develredhat-upgrade-postgresql-server-devel-debuginforedhat-upgrade-postgresql-staticredhat-upgrade-postgresql-testredhat-upgrade-postgresql-test-debuginforedhat-upgrade-postgresql-test-rpm-macrosredhat-upgrade-postgresql-upgraderedhat-upgrade-postgresql-upgrade-debuginforedhat-upgrade-postgresql-upgrade-develredhat-upgrade-postgresql-upgrade-devel-debuginforedhat-upgrade-postgresql16-debuginforedhat-upgrade-postgresql16-debugsource | Sep 1, 2025 | Aug 14, 2025 | |
| Rocky_linux | rocky-upgrade-pg_repackrocky-upgrade-pg_repack-debuginforocky-upgrade-pg_repack-debugsourcerocky-upgrade-pgauditrocky-upgrade-pgaudit-debuginforocky-upgrade-pgaudit-debugsourcerocky-upgrade-pgvectorrocky-upgrade-pgvector-debuginforocky-upgrade-pgvector-debugsourcerocky-upgrade-postgres-decoderbufsrocky-upgrade-postgres-decoderbufs-debuginforocky-upgrade-postgres-decoderbufs-debugsourcerocky-upgrade-postgresqlrocky-upgrade-postgresql-contribrocky-upgrade-postgresql-contrib-debuginforocky-upgrade-postgresql-debuginforocky-upgrade-postgresql-debugsourcerocky-upgrade-postgresql-docsrocky-upgrade-postgresql-docs-debuginforocky-upgrade-postgresql-plperlrocky-upgrade-postgresql-plperl-debuginforocky-upgrade-postgresql-plpython3rocky-upgrade-postgresql-plpython3-debuginforocky-upgrade-postgresql-pltclrocky-upgrade-postgresql-pltcl-debuginforocky-upgrade-postgresql-private-develrocky-upgrade-postgresql-private-libsrocky-upgrade-postgresql-private-libs-debuginforocky-upgrade-postgresql-serverrocky-upgrade-postgresql-server-debuginforocky-upgrade-postgresql-server-develrocky-upgrade-postgresql-server-devel-debuginforocky-upgrade-postgresql-staticrocky-upgrade-postgresql-testrocky-upgrade-postgresql-test-debuginforocky-upgrade-postgresql-upgraderocky-upgrade-postgresql-upgrade-debuginforocky-upgrade-postgresql-upgrade-develrocky-upgrade-postgresql-upgrade-devel-debuginforocky-upgrade-postgresql16-debuginforocky-upgrade-postgresql16-debugsource | Feb 5, 2026 | Sep 8, 2025 | |
| Suse | — | suse-upgrade-libecpg6suse-upgrade-libecpg6-32bitsuse-upgrade-libpq5suse-upgrade-libpq5-32bitsuse-upgrade-postgresql13suse-upgrade-postgresql13-contribsuse-upgrade-postgresql13-develsuse-upgrade-postgresql13-docssuse-upgrade-postgresql13-llvmjitsuse-upgrade-postgresql13-llvmjit-develsuse-upgrade-postgresql13-plperlsuse-upgrade-postgresql13-plpythonsuse-upgrade-postgresql13-pltclsuse-upgrade-postgresql13-serversuse-upgrade-postgresql13-server-develsuse-upgrade-postgresql13-testsuse-upgrade-postgresql14suse-upgrade-postgresql14-contribsuse-upgrade-postgresql14-develsuse-upgrade-postgresql14-docssuse-upgrade-postgresql14-llvmjitsuse-upgrade-postgresql14-llvmjit-develsuse-upgrade-postgresql14-plperlsuse-upgrade-postgresql14-plpythonsuse-upgrade-postgresql14-pltclsuse-upgrade-postgresql14-serversuse-upgrade-postgresql14-server-develsuse-upgrade-postgresql14-testsuse-upgrade-postgresql15suse-upgrade-postgresql15-contribsuse-upgrade-postgresql15-develsuse-upgrade-postgresql15-docssuse-upgrade-postgresql15-llvmjitsuse-upgrade-postgresql15-llvmjit-develsuse-upgrade-postgresql15-plperlsuse-upgrade-postgresql15-plpythonsuse-upgrade-postgresql15-pltclsuse-upgrade-postgresql15-serversuse-upgrade-postgresql15-server-develsuse-upgrade-postgresql15-testsuse-upgrade-postgresql16suse-upgrade-postgresql16-contribsuse-upgrade-postgresql16-develsuse-upgrade-postgresql16-docssuse-upgrade-postgresql16-llvmjitsuse-upgrade-postgresql16-llvmjit-develsuse-upgrade-postgresql16-plperlsuse-upgrade-postgresql16-plpythonsuse-upgrade-postgresql16-pltclsuse-upgrade-postgresql16-serversuse-upgrade-postgresql16-server-develsuse-upgrade-postgresql16-testsuse-upgrade-postgresql17suse-upgrade-postgresql17-contribsuse-upgrade-postgresql17-develsuse-upgrade-postgresql17-docssuse-upgrade-postgresql17-llvmjitsuse-upgrade-postgresql17-llvmjit-develsuse-upgrade-postgresql17-plperlsuse-upgrade-postgresql17-plpythonsuse-upgrade-postgresql17-pltclsuse-upgrade-postgresql17-serversuse-upgrade-postgresql17-server-develsuse-upgrade-postgresql17-test | Dec 5, 2025 | Aug 29, 2025 |
| Ubuntu | ubuntu-upgrade-postgresql-14ubuntu-upgrade-postgresql-16ubuntu-upgrade-postgresql-17ubuntu-upgrade-postgresql-client-14ubuntu-upgrade-postgresql-client-16ubuntu-upgrade-postgresql-client-17 | Sep 9, 2025 | Aug 14, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Aug 22, 2025 | Aug 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub