CVE-2025-8713
published 2025-08-14CVE-2025-8713: PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read…
PriorityP414low3.1CVSS 3.1
AVNACHPRLUINSUCLINAN
EPSS
0.22%
12.5th percentile
PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this data is consulted during the query planning process. Prior to this release, a user could craft a leaky operator that bypassed view access control lists (ACLs) and bypassed row security policies in partitioning or table inheritance hierarchies. Reachable statistics data notably included histograms and most-common-values lists. CVE-2017-7484 and CVE-2019-10130 intended to close this class of vulnerability, but this gap remained. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are affected.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | postgresql-13 | < postgresql-13 13.22-0+deb11u1 (bullseye) | postgresql-13 13.22-0+deb11u1 (bullseye) |
| debian | postgresql-15 | < postgresql-13 13.22-0+deb11u1 (bullseye) | postgresql-13 13.22-0+deb11u1 (bullseye) |
| debian | postgresql-17 | < postgresql-13 13.22-0+deb11u1 (bullseye) | postgresql-13 13.22-0+deb11u1 (bullseye) |
| msrc | azl3_postgresql_16.9-1_on_azure_linux_3.0 | — | — |
| msrc | cbl2_postgresql_14.18-1_on_cbl_mariner_2.0 | — | — |
CVSS provenance
nvdv3.13.1LOWCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
vendor_msrc3.1LOW
vendor_ubuntu3.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
PostgreSQL vulnerabilities
vendor_ubuntu·2025-09-08·CVSS 3.1
CVE-2025-8713 [LOW] PostgreSQL vulnerabilities
Title: PostgreSQL vulnerabilities
Summary: Several security issues were fixed in PostgreSQL.
Dean Rasheed discovered that PostgreSQL incorrectly handled access control
lists. An attacker could possibly use this issue to obtain sensitive
information. (CVE-2025-8713)
Martin Rakhmanov, Matthieu Denais, and RyotaK discovered that the PostgreSQL
pg_dump utility allowed untrusted data inclusion. A malicious superuser
could use this issue to execute arbitrary code when a dump script is
reloaded. (CVE-2025-8714)
Noah Misch discovered that the PostgreSQL pg_dump utility incorrectly
filtered line breaks in object names. An attacker could create object names
that execute arbitrary SQL commands when a dump script is reloaded.
(CVE-2025-8715)
Instructions: This update uses a new upstream release,
Red Hat
postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table
vendor_redhat·2025-08-14·CVSS 7.5
CVE-2025-8713 [HIGH] CWE-1230 postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table
postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table
PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this data is consulted during the query planning process. Prior to this release, a user could craft a leaky operator that bypassed view access control lists (ACLs) and bypassed row security policies in partitioning or table inheritance hierarchies. Reachable statistics data notably included histograms and most-common-values lists. CVE-2017-7484 and CVE-2019-10130 intended to close this class of
Microsoft
PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table
vendor_msrc·2025-08-12·CVSS 3.1
CVE-2025-8713 [LOW] CWE-1230 PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table
PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
PostgreSQL: PostgreSQL
Customer Action Required: Yes
Remediat
Debian
CVE-2025-8713: postgresql-13 - PostgreSQL optimizer statistics allow a user to read sampled data within a view ...
vendor_debian·2025·CVSS 7.5
CVE-2025-8713 [HIGH] CVE-2025-8713: postgresql-13 - PostgreSQL optimizer statistics allow a user to read sampled data within a view ...
PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this data is consulted during the query planning process. Prior to this release, a user could craft a leaky operator that bypassed view access control lists (ACLs) and bypassed row security policies in partitioning or table inheritance hierarchies. Reachable statistics data notably included histograms and most-common-values lists. CVE-2017-7484 and CVE-2019-10130 intended to close this class of vulnerability, but this gap remained. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are aff
OSV
postgresql-14, postgresql-16, postgresql-17 vulnerabilities
osv·2025-09-08·CVSS 3.1
CVE-2025-8713 [LOW] postgresql-14, postgresql-16, postgresql-17 vulnerabilities
postgresql-14, postgresql-16, postgresql-17 vulnerabilities
Dean Rasheed discovered that PostgreSQL incorrectly handled access control
lists. An attacker could possibly use this issue to obtain sensitive
information. (CVE-2025-8713)
Martin Rakhmanov, Matthieu Denais, and RyotaK discovered that the PostgreSQL
pg_dump utility allowed untrusted data inclusion. A malicious superuser
could use this issue to execute arbitrary code when a dump script is
reloaded. (CVE-2025-8714)
Noah Misch discovered that the PostgreSQL pg_dump utility incorrectly
filtered line breaks in object names. An attacker could create object names
that execute arbitrary SQL commands when a dump script is reloaded.
(CVE-2025-8715)
OSV
CVE-2025-8713: PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access
osv·2025-08-14·CVSS 7.5
CVE-2025-8713 [HIGH] CVE-2025-8713: PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access
PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this data is consulted during the query planning process. Prior to this release, a user could craft a leaky operator that bypassed view access control lists (ACLs) and bypassed row security policies in partitioning or table inheritance hierarchies. Reachable statistics data notably included histograms and most-common-values lists. CVE-2017-7484 and CVE-2019-10130 intended to close this class of vulnerability, but this gap remained. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are aff
GHSA
GHSA-cqj3-wjpm-fjvp: PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access
ghsa_unreviewed·2025-08-14·CVSS 7.5
CVE-2025-8713 [HIGH] CWE-1230 GHSA-cqj3-wjpm-fjvp: PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access
PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this data is consulted during the query planning process. Prior to this release, a user could craft a leaky operator that bypassed view access control lists (ACLs) and bypassed row security policies in partitioning or table inheritance hierarchies. Reachable statistics data notably included histograms and most-common-values lists. CVE-2017-7484 and CVE-2019-10130 intended to close this class of vulnerability, but this gap remained. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are aff
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2025-8713 postgresql16: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table [fedora-42]
bugzilla·2025-08-14·CVSS 3.1
CVE-2025-8713 [LOW] CVE-2025-8713 postgresql16: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table [fedora-42]
CVE-2025-8713 postgresql16: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 20
Bugzilla
CVE-2025-8713 postgresql17: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table [fedora-42]
bugzilla·2025-08-14·CVSS 3.1
CVE-2025-8713 [LOW] CVE-2025-8713 postgresql17: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table [fedora-42]
CVE-2025-8713 postgresql17: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 20
Bugzilla
CVE-2025-8713 mingw-postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table [fedora-42]
bugzilla·2025-08-14·CVSS 3.1
CVE-2025-8713 [LOW] CVE-2025-8713 mingw-postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table [fedora-42]
CVE-2025-8713 mingw-postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 o
Bugzilla
CVE-2025-39728 kernel: clk: samsung: Fix UBSAN panic in samsung_clk_init()
bugzilla·2025-04-18·CVSS 5.5
CVE-2025-39728 [MEDIUM] CVE-2025-39728 kernel: clk: samsung: Fix UBSAN panic in samsung_clk_init()
CVE-2025-39728 kernel: clk: samsung: Fix UBSAN panic in samsung_clk_init()
In the Linux kernel, the following vulnerability has been resolved:
clk: samsung: Fix UBSAN panic in samsung_clk_init()
With UBSAN_ARRAY_BOUNDS=y, I'm hitting the below panic due to
dereferencing `ctx->clk_data.hws` before setting
`ctx->clk_data.num = nr_clks`. Move that up to fix the crash.
UBSAN: array index out of bounds: 00000000f2005512 [#1] PREEMPT SMP
Call trace:
samsung_clk_init+0x110/0x124 (P)
samsung_clk_init+0x48/0x124 (L)
samsung_cmu_register_one+0x3c/0xa0
exynos_arm64_register_cmu+0x54/0x64
__gs101_cmu_top_of_clk_init_declare+0x28/0x60
...
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025041820-CVE-2025-39728-8713@gregkh/T
2025-08-14
Published