Read the docs
TI-2025-00929 Aliases CVE-2025-1094GHSA-mhw9-x46c-v6q4

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

Priority HIGH 80CWE-149Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 18 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the function result to construct input to psql, the PostgreSQL interactive terminal. Similarly, improper neutralization of quoting syntax in PostgreSQL command line utility programs allows a source of command line arguments to achieve SQL injection when client_encoding is BIG5 and server_encoding is one of EUC_TW or MULE_INTERNAL. Versions before PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19 are affected.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.9003 99th percentileScored 2026-11-07
Fix Partial PostgreSQL: 17.3, 16.7, 15.11 +2Red Hat: 31 advisoriesRed Hat: 18 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—PostgreSQL17 to before 17.3; 16 to before 16.7; 15 to before 15.11; 14 to before 14.16; before 13.1917.3, 16.7, 15.11, 14.16, 13.19Patch availableCNA
  • PostgreSQL Vendor— Affected 17 to before 17.3; 16 to before 16.7; 15 to before 15.11; 14 to before 14.16; before 13.19 Fixed in 17.3, 16.7, 15.11, 14.16, 13.19 Patch available CNA

Remediation

  • Fix · CNA PostgreSQL Fixed in 17.3, 16.7, 15.11, 14.16, 13.19

Red Hat 31 advisories

  • RHSA-2025:3978 Released 2025-04-17 · Red Hat rating Important
    postgresql security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) postgresql-9.2.24-9.el7_9.3, postgresql-9.2.24-9.el7_9.3.ppc, postgresql-contrib-9.2.24-9.el7_9.3 +10
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) postgresql-static-9.2.24-9.el7_9.3, postgresql-static-9.2.24-9.el7_9.3.ppc, postgresql-upgrade-9.2.24-9.el7_9.3
  • RHSA-2025:3082 Released 2025-03-20 · Red Hat rating Important
    postgresql:12 security update
    • Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.aarch64::postgresql:12, pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.ppc64le::postgresql:12, pg_repack-1.4.6-3.module+el8.9.0+19330+c97ddbdf.s390x::postgresql:12 +47
  • RHSA-2025:3064 Released 2025-03-20 · Red Hat rating Important
    postgresql:12 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.src::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64::postgresql:12, pgaudit-1.4.0-5.module+el8.5.0+11354+78b3c9c5.src::postgresql:12 +17
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.aarch64::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.ppc64le::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.s390x::postgresql:12 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.src::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64::postgresql:12, pgaudit-1.4.0-5.module+el8.5.0+11354+78b3c9c5.src::postgresql:12 +17
Show 28 more Red Hat advisories
  • RHSA-2025:3063 Released 2025-03-20 · Red Hat rating Important
    postgresql:12 security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.src::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64::postgresql:12, postgres-decoderbufs-0.10.0-2.module+el8.2.0+9043+1dbb5661.src::postgresql:12 +15
  • RHSA-2025:3062 Released 2025-03-20 · Red Hat rating Important
    postgresql:12 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.src::postgresql:12, pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.x86_64::postgresql:12, postgres-decoderbufs-0.10.0-2.module+el8.4.0+11288+c193d6d7.src::postgresql:12 +15
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.ppc64le::postgresql:12, pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.src::postgresql:12, pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.x86_64::postgresql:12 +29
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.src::postgresql:12, pgaudit-1.4.0-6.module+el8.4.0+11288+c193d6d7.x86_64::postgresql:12, postgres-decoderbufs-0.10.0-2.module+el8.4.0+11288+c193d6d7.src::postgresql:12 +15
  • RHSA-2025:3050 Released 2025-03-20 · Red Hat rating Important
    postgresql:12 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.aarch64::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.ppc64le::postgresql:12, pg_repack-1.4.6-3.module+el8.5.0+11354+78b3c9c5.s390x::postgresql:12 +47
  • RHSA-2025:1745 Released 2025-02-20 · Red Hat rating Important
    libpq security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) libpq-13.20-1.el8_6, libpq-devel-13.20-1.el8_6
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) libpq-13.20-1.el8_6, libpq-devel-13.20-1.el8_6
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) libpq-13.20-1.el8_6, libpq-devel-13.20-1.el8_6
  • RHSA-2025:1739 Released 2025-02-20 · Red Hat rating Important
    postgresql:15 security update
    • Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.8-1.module+el8.9.0+19797+c4ce5969.aarch64::postgresql:15, pg_repack-1.4.8-1.module+el8.9.0+19797+c4ce5969.ppc64le::postgresql:15, pg_repack-1.4.8-1.module+el8.9.0+19797+c4ce5969.s390x::postgresql:15 +47
  • RHSA-2025:1744 Released 2025-02-20 · Red Hat rating Important
    libpq security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) libpq-13.20-1.el8_8, libpq-devel-13.20-1.el8_8
  • RHSA-2025:1740 Released 2025-02-20 · Red Hat rating Important
    postgresql:16 security update
    • Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.5.1-1.module+el8.10.0+22551+c0330dc9.aarch64::postgresql:16, pg_repack-1.5.1-1.module+el8.10.0+22551+c0330dc9.ppc64le::postgresql:16, pg_repack-1.5.1-1.module+el8.10.0+22551+c0330dc9.s390x::postgresql:16 +47
  • RHSA-2025:1741 Released 2025-02-20 · Red Hat rating Important
    postgresql:15 security update
    • Red Hat Enterprise Linux AppStream (v. 9) pg_repack-1.4.8-2.module+el9.5.0+22224+f5585c78.aarch64::postgresql:15, pg_repack-1.4.8-2.module+el9.5.0+22224+f5585c78.ppc64le::postgresql:15, pg_repack-1.4.8-2.module+el9.5.0+22224+f5585c78.s390x::postgresql:15 +47
  • RHSA-2025:1743 Released 2025-02-20 · Red Hat rating Important
    postgresql:16 security update
    • Red Hat Enterprise Linux AppStream (v. 9) pg_repack-1.5.1-1.module+el9.5.0+22557+8cb08ba5.aarch64::postgresql:16, pg_repack-1.5.1-1.module+el9.5.0+22557+8cb08ba5.ppc64le::postgresql:16, pg_repack-1.5.1-1.module+el9.5.0+22557+8cb08ba5.s390x::postgresql:16 +47
  • RHSA-2025:1736 Released 2025-02-20 · Red Hat rating Important
    postgresql:13 security update
    • Red Hat Enterprise Linux AppStream (v. 8) pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.aarch64::postgresql:13, pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.ppc64le::postgresql:13, pg_repack-1.4.6-3.module+el8.9.0+20664+9c30cf7f.s390x::postgresql:13 +47
  • RHSA-2025:1742 Released 2025-02-20 · Red Hat rating Important
    postgresql security update
    • Red Hat CodeReady Linux Builder (v. 9) postgresql-docs-13.20-1.el9_5, postgresql-private-devel-13.20-1.el9_5, postgresql-server-devel-13.20-1.el9_5 +4
    • Red Hat Enterprise Linux AppStream (v. 9) postgresql-13.20-1.el9_5, postgresql-contrib-13.20-1.el9_5, postgresql-plperl-13.20-1.el9_5 +5
  • RHSA-2025:1737 Released 2025-02-20 · Red Hat rating Important
    libpq security update
    • Red Hat Enterprise Linux AppStream (v. 8) libpq-13.20-1.el8_10, libpq-devel-13.20-1.el8_10
  • RHSA-2025:1738 Released 2025-02-20 · Red Hat rating Important
    libpq security update
    • Red Hat Enterprise Linux AppStream (v. 9) libpq-13.20-1.el9_5, libpq-devel-13.20-1.el9_5
  • RHSA-2025:1735 Released 2025-02-20 · Red Hat rating Important
    libpq security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) libpq-13.20-1.el8_4, libpq-devel-13.20-1.el8_4
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) libpq-13.20-1.el8_4, libpq-devel-13.20-1.el8_4
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) libpq-13.20-1.el8_4, libpq-devel-13.20-1.el8_4
  • RHSA-2025:1731 Released 2025-02-20 · Red Hat rating Important
    postgresql:16 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) pg_repack-1.4.8-1.module+el9.4.0+20427+07482b8c.aarch64::postgresql:16, pg_repack-1.4.8-1.module+el9.4.0+20427+07482b8c.ppc64le::postgresql:16, pg_repack-1.4.8-1.module+el9.4.0+20427+07482b8c.s390x::postgresql:16 +47
  • RHSA-2025:1730 Released 2025-02-20 · Red Hat rating Important
    postgresql:15 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.aarch64::postgresql:15, pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.ppc64le::postgresql:15, pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.s390x::postgresql:15 +47
  • RHSA-2025:1729 Released 2025-02-20 · Red Hat rating Important
    postgresql:13 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.aarch64::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.ppc64le::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.s390x::postgresql:13 +47
  • RHSA-2025:1726 Released 2025-02-20 · Red Hat rating Important
    postgresql security update
    • Red Hat CodeReady Linux Builder EUS (v.9.4) postgresql-docs-13.20-1.el9_4, postgresql-private-devel-13.20-1.el9_4, postgresql-server-devel-13.20-1.el9_4 +3
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) postgresql-13.20-1.el9_4, postgresql-contrib-13.20-1.el9_4, postgresql-plperl-13.20-1.el9_4 +5
  • RHSA-2025:1727 Released 2025-02-20 · Red Hat rating Important
    postgresql security update
    • Red Hat CodeReady Linux Builder EUS (v.9.2) postgresql-docs-13.20-1.el9_2, postgresql-private-devel-13.20-1.el9_2, postgresql-server-devel-13.20-1.el9_2 +3
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) postgresql-13.20-1.el9_2, postgresql-contrib-13.20-1.el9_2, postgresql-plperl-13.20-1.el9_2 +5
  • RHSA-2025:1732 Released 2025-02-20 · Red Hat rating Important
    libpq security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) libpq-13.20-1.el9_4, libpq-devel-13.20-1.el9_4
  • RHSA-2025:1733 Released 2025-02-20 · Red Hat rating Important
    libpq security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) libpq-13.20-1.el9_2, libpq-devel-13.20-1.el9_2
  • RHSA-2025:1723 Released 2025-02-20 · Red Hat rating Important
    postgresql:13 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.src::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.x86_64::postgresql:13, pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.src::postgresql:13 +17
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.aarch64::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.ppc64le::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.s390x::postgresql:13 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.src::postgresql:13, pg_repack-1.4.6-3.module+el8.5.0+11357+bcc62552.x86_64::postgresql:13, pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.src::postgresql:13 +17
  • RHSA-2025:1724 Released 2025-02-20 · Red Hat rating Important
    postgresql:13 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.src::postgresql:13, pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64::postgresql:13, postgres-decoderbufs-0.10.0-2.module+el8.4.0+8873+b821c30a.src::postgresql:13 +15
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.ppc64le::postgresql:13, pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.src::postgresql:13, pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64::postgresql:13 +29
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.src::postgresql:13, pgaudit-1.5.0-1.module+el8.4.0+8873+b821c30a.x86_64::postgresql:13, postgres-decoderbufs-0.10.0-2.module+el8.4.0+8873+b821c30a.src::postgresql:13 +15
  • RHSA-2025:1721 Released 2025-02-20 · Red Hat rating Important
    postgresql:15 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) pg_repack-1.4.8-1.module+el8.8.0+17071+aaaceaa4.aarch64::postgresql:15, pg_repack-1.4.8-1.module+el8.8.0+17071+aaaceaa4.ppc64le::postgresql:15, pg_repack-1.4.8-1.module+el8.8.0+17071+aaaceaa4.s390x::postgresql:15 +47
  • RHSA-2025:1728 Released 2025-02-20 · Red Hat rating Important
    postgresql security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) postgresql-13.20-1.el9_0, postgresql-contrib-13.20-1.el9_0, postgresql-plperl-13.20-1.el9_0 +5
  • RHSA-2025:1722 Released 2025-02-20 · Red Hat rating Important
    postgresql:15 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.aarch64::postgresql:15, pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.ppc64le::postgresql:15, pg_repack-1.4.8-1.module+el9.2.0+17405+aeb9ec60.s390x::postgresql:15 +47
  • RHSA-2025:1725 Released 2025-02-20 · Red Hat rating Important
    libpq security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) libpq-13.20-1.el9_0, libpq-devel-13.20-1.el9_0
  • RHSA-2025:1720 Released 2025-02-20 · Red Hat rating Important
    libpq security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) libpq-12.7-1.el8_2.2, libpq-devel-12.7-1.el8_2.2

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat CodeReady Linux Builder (v. 9)Fixed RHSA-2025:1742
Red Hat CodeReady Linux Builder EUS (v.9.2)Fixed RHSA-2025:1727
Red Hat CodeReady Linux Builder EUS (v.9.4)Fixed RHSA-2025:1726
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2025:1736, RHSA-2025:1737, RHSA-2025:1739, RHSA-2025:1740, RHSA-2025:3082
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:1738, RHSA-2025:1741, RHSA-2025:1742, RHSA-2025:1743
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2025:1720, RHSA-2025:3063
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2025:1724, RHSA-2025:1735, RHSA-2025:3062
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2025:1723, RHSA-2025:1745, RHSA-2025:3064
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2025:1724, RHSA-2025:1735, RHSA-2025:3062
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2025:1723, RHSA-2025:1745, RHSA-2025:3064
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2025:1725, RHSA-2025:1728
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2025:1721, RHSA-2025:1729, RHSA-2025:1744, RHSA-2025:3050
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2025:1722, RHSA-2025:1727, RHSA-2025:1733
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:1726, RHSA-2025:1730, RHSA-2025:1731, RHSA-2025:1732
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2025:1724, RHSA-2025:1735, RHSA-2025:3062
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2025:1723, RHSA-2025:1745, RHSA-2025:3064
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2025:3978
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2025:3978
Not affected: 1 product
  • Red Hat Enterprise Linux 10

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-1094
  2. 2026-10-03 Alias added: GHSA-mhw9-x46c-v6q4
  3. 2026-11-03 CISA SSVC decision points changed

References

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences