CVE-2025-1094

Scores

EPSS

0.831high83.1%
0%20%40%60%80%100%

Percentile: 83.1%

CVSS

8.1high3.x
0246810

CVSS Score: 8.1/10

All CVSS Scores

CVSS 3.x
8.1

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the function result to construct input to psql, the PostgreSQL interactive terminal. Similarly, improper neutralization of quoting syntax in PostgreSQL command line utility programs allows a source of command line arguments to achieve SQL injection when client_encoding is BIG5 and server_encoding is one of EUC_TW or MULE_INTERNAL. Versions before PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19 are affected.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

anchore_overridesastradebianredhatubuntu

CWEs

20CWE-149

Related Vulnerabilities

Exploits

Exploit ID: CVE-2025-1094

Source: github-poc

URL: https://github.com/aninfosec/CVE-2025-1094

Vulnerable Software (30)

Type: Configuration

Operating System:

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",          "versionEndExcluding": "17.3",          "versionStartIncludin...

Source: anchore_overrides

Type: Configuration

Product: libecpg6-15

Operating System: altlinux

Trait:
{  "fixed": "0:15.12-alt1"}

Source: redhat

Type: Configuration

Product: libecpg6-15-devel

Operating System: altlinux

Trait:
{  "fixed": "0:15.12-alt1"}

Source: redhat

Type: Configuration

Product: libecpg6-15-devel-static

Operating System: altlinux

Trait:
{  "fixed": "0:15.12-alt1"}

Source: redhat

Type: Configuration

Product: libpq5-15-devel

Operating System: altlinux

Trait:
{  "fixed": "0:15.12-alt1"}

Source: redhat

Type: Configuration

Product: libpq5-15-devel-static

Operating System: altlinux

Trait:
{  "fixed": "0:15.12-alt1"}

Source: redhat

Type: Configuration

Product: postgresql-11

Operating System: astra 1.7.7.6

Trait:
{  "unaffected": true}

Source: astra

Type: Configuration

Product: postgresql-11

Operating System: astra 4.7.7.4

Trait:
{  "unaffected": true}

Source: astra

Type: Configuration

Product: postgresql-12

Operating System: ubuntu focal 20.04

Trait:
{  "fixed": "12.22-0ubuntu0.20.04.2"}

Source: ubuntu

Type: Configuration

Product: postgresql-13

Operating System: debian

Trait:
{  "unfixed": true}

Source: debian

Type: Configuration

Product: postgresql-14

Operating System: ubuntu jammy 22.04

Trait:
{  "fixed": "14.17-0ubuntu0.22.04.1"}

Source: ubuntu

Type: Configuration

Product: postgresql-15

Operating System: debian

Trait:
{  "unfixed": true}

Source: debian

Type: Configuration

Product: postgresql-15

Operating System: debian bookworm 12

Trait:
{  "fixed": "15.11-0+deb12u1"}

Source: debian

Type: Configuration

Product: postgresql-16

Operating System: ubuntu noble 24.04

Trait:
{  "fixed": "16.8-0ubuntu0.24.04.1"}

Source: ubuntu

Type: Configuration

Product: postgresql-16

Operating System: ubuntu oracular 24.10

Trait:
{  "fixed": "16.8-0ubuntu0.24.10.1"}

Source: ubuntu

Type: Configuration

Product: postgresql-17

Operating System: debian

Trait:
{  "fixed": "17.3-1"}

Source: debian

Type: Configuration

Product: postgresql-17

Operating System: ubuntu plucky 25.04

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: postgresql-17

Operating System: ubuntu questing 25.10

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: postgresql15

Operating System: altlinux

Trait:
{  "fixed": "0:15.12-alt1"}

Source: redhat

Type: Configuration

Product: postgresql15-contrib

Operating System: altlinux

Trait:
{  "fixed": "0:15.12-alt1"}

Source: redhat