CVE-2020-25696

Description

A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive psql session uses gset when querying a compromised server, the attacker can execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.473

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2020-25696 Announcement,CVE-2020-25695 Announcement,CVE-2020-25694 Announcement are fixed in Postgresql 9.5.24Windows
Vulnerabilities CVE-2020-25696 Announcement,CVE-2020-25695 Announcement,CVE-2020-25694 Announcement are fixed in Postgresql 9.6.20Windows
Vulnerabilities CVE-2020-25696 Announcement,CVE-2020-25695 Announcement,CVE-2020-25694 Announcement are fixed in Postgresql 10.15Windows
Vulnerabilities CVE-2020-25696 Announcement,CVE-2020-25695 Announcement,CVE-2020-25694 Announcement are fixed in Postgresql 11.10Windows
Vulnerabilities CVE-2020-25696 Announcement,CVE-2020-25695 Announcement,CVE-2020-25694 Announcement are fixed in Postgresql 12.5Windows
Vulnerabilities CVE-2020-25696 Announcement,CVE-2020-25695 Announcement,CVE-2020-25694 Announcement are fixed in Postgresql 13.1Windows
Vulnerabilities CVE-2020-25696,CVE-2020-25695,CVE-2020-25694 are fixed in PostgreSQL 13.1Windows
Vulnerabilities CVE-2020-25696,CVE-2020-25695,CVE-2020-25694 are fixed in PostgreSQL 12.5Windows
Vulnerabilities CVE-2020-25696,CVE-2020-25695,CVE-2020-25694 are fixed in PostgreSQL 11.10Windows
Vulnerabilities CVE-2020-25696,CVE-2020-25695,CVE-2020-25694 are fixed in PostgreSQL 10.15Windows
Vulnerabilities CVE-2020-25696,CVE-2020-25695,CVE-2020-25694 are fixed in PostgreSQL 9.6.20Windows
Vulnerabilities CVE-2020-25696,CVE-2020-25695,CVE-2020-25694 are fixed in PostgreSQL 9.5.24Windows
Object-relational SQL database (USN-4633-1) postgresql-10_10.15-0ubuntu0.18.04.1_i386.debLinux
Object-relational SQL database (USN-4633-1) postgresql-10_10.15-0ubuntu0.18.04.1_amd64.debLinux
Object-relational SQL database (USN-4633-1) postgresql-12_12.5-0ubuntu0.20.04.1_i386.debLinux
Object-relational SQL database (USN-4633-1) postgresql-12_12.5-0ubuntu0.20.04.1_amd64.debLinux
Object-relational SQL database (USN-4633-1) postgresql-12_12.5-0ubuntu0.20.10.1_i386.debLinux
Object-relational SQL database (USN-4633-1) postgresql-12_12.5-0ubuntu0.20.10.1_amd64.debLinux
Object-relational SQL database (USN-4633-1) postgresql-9.5_9.5.24-0ubuntu0.16.04.1_i386.debLinux
Object-relational SQL database (USN-4633-1) postgresql-9.5_9.5.24-0ubuntu0.16.04.1_amd64.debLinux
SUSE-SU-2020:3464-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql10-10.15-4.9.1.x86_64.rpmLinux
SUSE-SU-2020:3464-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql10-contrib-10.15-4.9.1.x86_64.rpmLinux
SUSE-SU-2020:3464-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql10-contrib-debuginfo-10.15-4.9.1.x86_64.rpmLinux
SUSE-SU-2020:3464-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql10-debuginfo-10.15-4.9.1.x86_64.rpmLinux
SUSE-SU-2020:3464-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql10-debugsource-10.15-4.9.1.x86_64.rpmLinux
SUSE-SU-2020:3464-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql10-docs-10.15-4.9.1.noarch.rpmLinux
SUSE-SU-2020:3464-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql10-plperl-10.15-4.9.1.x86_64.rpmLinux
SUSE-SU-2020:3464-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql10-plperl-debuginfo-10.15-4.9.1.x86_64.rpmLinux
SUSE-SU-2020:3464-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql10-plpython-10.15-4.9.1.x86_64.rpmLinux
SUSE-SU-2020:3464-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql10-plpython-debuginfo-10.15-4.9.1.x86_64.rpmLinux
SUSE-SU-2020:3464-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql10-pltcl-10.15-4.9.1.x86_64.rpmLinux
SUSE-SU-2020:3464-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql10-pltcl-debuginfo-10.15-4.9.1.x86_64.rpmLinux
SUSE-SU-2020:3464-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql10-server-10.15-4.9.1.x86_64.rpmLinux
SUSE-SU-2020:3464-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql10-server-debuginfo-10.15-4.9.1.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) libecpg6-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) libecpg6-debuginfo-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) libpq5-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) libpq5-32bit-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) libpq5-debuginfo-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) libpq5-debuginfo-32bit-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-contrib-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-contrib-debuginfo-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-debuginfo-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-debugsource-12.5-3.9.1.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-debugsource-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-docs-12.5-3.9.3.noarch.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-plperl-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-plperl-debuginfo-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-plpython-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-plpython-debuginfo-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-pltcl-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-pltcl-debuginfo-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-server-12.5-3.9.3.x86_64.rpmLinux
SUSE-SU-2020:3630-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-server-debuginfo-12.5-3.9.3.x86_64.rpmLinux
Vulnerabilities CVE-2020-25696 Announcement,CVE-2020-25695 Announcement,CVE-2020-25694 Announcement are fixed in Postgresql 9.5.24 (For Linux)Linux
Vulnerabilities CVE-2020-25696 Announcement,CVE-2020-25695 Announcement,CVE-2020-25694 Announcement are fixed in Postgresql 9.6.20 (For Linux)Linux
Vulnerabilities CVE-2020-25696 Announcement,CVE-2020-25695 Announcement,CVE-2020-25694 Announcement are fixed in Postgresql 10.15 (For Linux)Linux
Vulnerabilities CVE-2020-25696 Announcement,CVE-2020-25695 Announcement,CVE-2020-25694 Announcement are fixed in Postgresql 11.10 (For Linux)Linux
Vulnerabilities CVE-2020-25696 Announcement,CVE-2020-25695 Announcement,CVE-2020-25694 Announcement are fixed in Postgresql 12.5 (For Linux)Linux
Vulnerabilities CVE-2020-25696 Announcement,CVE-2020-25695 Announcement,CVE-2020-25694 Announcement are fixed in Postgresql 13.1 (For Linux)Linux
(RHSA-2020:5401) libpq security update libpq-12.5-1.el8_3.i686.rpmLinux
(RHSA-2020:5401) libpq security update libpq-12.5-1.el8_3.x86_64.rpmLinux
(RHSA-2020:5401) libpq security update libpq-debugsource-12.5-1.el8_3.i686.rpmLinux
(RHSA-2020:5401) libpq security update libpq-debugsource-12.5-1.el8_3.x86_64.rpmLinux
(RHSA-2020:5401) libpq security update libpq-devel-12.5-1.el8_3.i686.rpmLinux
(RHSA-2020:5401) libpq security update libpq-devel-12.5-1.el8_3.x86_64.rpmLinux
(RHSA-2020:5567) postgresql:10 security update postgresql-test-rpm-macros-10.15-1.module+el8.3.0+8944+1ca16b1f.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update pgaudit-1.4.0-4.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update pgaudit-debugsource-1.4.0-4.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgres-decoderbufs-0.10.0-2.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgres-decoderbufs-debugsource-0.10.0-2.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgresql-12.5-1.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgresql-contrib-12.5-1.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgresql-debugsource-12.5-1.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgresql-docs-12.5-1.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgresql-plperl-12.5-1.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgresql-plpython3-12.5-1.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgresql-pltcl-12.5-1.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgresql-server-12.5-1.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgresql-server-devel-12.5-1.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgresql-static-12.5-1.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgresql-test-12.5-1.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgresql-test-rpm-macros-12.5-1.module+el8.3.0+9042+664538f4.noarch.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgresql-upgrade-12.5-1.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5620) postgresql:12 security update postgresql-upgrade-devel-12.5-1.module+el8.3.0+9042+664538f4.x86_64.rpmLinux
(RHSA-2020:5619) postgresql:9.6 security update postgresql-9.6.20-1.module+el8.3.0+8938+7f0e88b6.x86_64.rpmLinux
(RHSA-2020:5619) postgresql:9.6 security update postgresql-contrib-9.6.20-1.module+el8.3.0+8938+7f0e88b6.x86_64.rpmLinux
(RHSA-2020:5619) postgresql:9.6 security update postgresql-debugsource-9.6.20-1.module+el8.3.0+8938+7f0e88b6.x86_64.rpmLinux
(RHSA-2020:5619) postgresql:9.6 security update postgresql-docs-9.6.20-1.module+el8.3.0+8938+7f0e88b6.x86_64.rpmLinux
(RHSA-2020:5619) postgresql:9.6 security update postgresql-plperl-9.6.20-1.module+el8.3.0+8938+7f0e88b6.x86_64.rpmLinux
(RHSA-2020:5619) postgresql:9.6 security update postgresql-plpython3-9.6.20-1.module+el8.3.0+8938+7f0e88b6.x86_64.rpmLinux
(RHSA-2020:5619) postgresql:9.6 security update postgresql-pltcl-9.6.20-1.module+el8.3.0+8938+7f0e88b6.x86_64.rpmLinux
(RHSA-2020:5619) postgresql:9.6 security update postgresql-server-9.6.20-1.module+el8.3.0+8938+7f0e88b6.x86_64.rpmLinux
(RHSA-2020:5619) postgresql:9.6 security update postgresql-server-devel-9.6.20-1.module+el8.3.0+8938+7f0e88b6.x86_64.rpmLinux
(RHSA-2020:5619) postgresql:9.6 security update postgresql-static-9.6.20-1.module+el8.3.0+8938+7f0e88b6.x86_64.rpmLinux
(RHSA-2020:5619) postgresql:9.6 security update postgresql-test-9.6.20-1.module+el8.3.0+8938+7f0e88b6.x86_64.rpmLinux
(RHSA-2020:5619) postgresql:9.6 security update postgresql-test-rpm-macros-9.6.20-1.module+el8.3.0+8938+7f0e88b6.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) libecpg6-13.1-3.3.1.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) libecpg6-debuginfo-13.1-3.3.1.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) libpq5-13.1-3.3.1.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) libpq5-32bit-13.1-3.3.1.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) libpq5-debuginfo-13.1-3.3.1.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) libpq5-debuginfo-32bit-13.1-3.3.1.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql-13-4.7.1.noarch.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql-contrib-13-4.7.1.noarch.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql-docs-13-4.7.1.noarch.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql-plperl-13-4.7.1.noarch.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql-plpython-13-4.7.1.noarch.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql-pltcl-13-4.7.1.noarch.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql-server-13-4.7.1.noarch.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-12.5-3.12.3.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-contrib-12.5-3.12.3.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-contrib-debuginfo-12.5-3.12.3.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-debuginfo-12.5-3.12.3.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-debugsource-12.5-3.12.3.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-docs-12.5-3.12.3.noarch.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-plperl-12.5-3.12.3.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-plperl-debuginfo-12.5-3.12.3.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-plpython-12.5-3.12.3.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-plpython-debuginfo-12.5-3.12.3.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-pltcl-12.5-3.12.3.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-pltcl-debuginfo-12.5-3.12.3.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-server-12.5-3.12.3.x86_64.rpmLinux
SUSE-SU-2021:0217-1(SUSE Linux Enterprise Server 12-SP5 ) postgresql12-server-debuginfo-12.5-3.12.3.x86_64.rpmLinux
Rh-postgresql10-postgresql update (ELSA-2021-9290) rh-postgresql10-postgresql-10.15-1.el7.x86_64.rpmLinux
Rh-postgresql10-postgresql-contrib update (ELSA-2021-9290) rh-postgresql10-postgresql-contrib-10.15-1.el7.x86_64.rpmLinux
Rh-postgresql10-postgresql-contrib-syspaths update (ELSA-2021-9290) rh-postgresql10-postgresql-contrib-syspaths-10.15-1.el7.x86_64.rpmLinux
Rh-postgresql10-postgresql-devel update (ELSA-2021-9290) rh-postgresql10-postgresql-devel-10.15-1.el7.x86_64.rpmLinux
Rh-postgresql10-postgresql-docs update (ELSA-2021-9290) rh-postgresql10-postgresql-docs-10.15-1.el7.x86_64.rpmLinux
Rh-postgresql10-postgresql-libs update (ELSA-2021-9290) rh-postgresql10-postgresql-libs-10.15-1.el7.x86_64.rpmLinux
Rh-postgresql10-postgresql-plperl update (ELSA-2021-9290) rh-postgresql10-postgresql-plperl-10.15-1.el7.x86_64.rpmLinux
Rh-postgresql10-postgresql-plpython update (ELSA-2021-9290) rh-postgresql10-postgresql-plpython-10.15-1.el7.x86_64.rpmLinux
Rh-postgresql10-postgresql-pltcl update (ELSA-2021-9290) rh-postgresql10-postgresql-pltcl-10.15-1.el7.x86_64.rpmLinux
Rh-postgresql10-postgresql-server update (ELSA-2021-9290) rh-postgresql10-postgresql-server-10.15-1.el7.x86_64.rpmLinux
Rh-postgresql10-postgresql-server-syspaths update (ELSA-2021-9290) rh-postgresql10-postgresql-server-syspaths-10.15-1.el7.x86_64.rpmLinux
Rh-postgresql10-postgresql-static update (ELSA-2021-9290) rh-postgresql10-postgresql-static-10.15-1.el7.x86_64.rpmLinux
Rh-postgresql10-postgresql-syspaths update (ELSA-2021-9290) rh-postgresql10-postgresql-syspaths-10.15-1.el7.x86_64.rpmLinux
Rh-postgresql10-postgresql-test update (ELSA-2021-9290) rh-postgresql10-postgresql-test-10.15-1.el7.x86_64.rpmLinux
Vulnerabilities CVE-2020-25696,CVE-2020-25695,CVE-2020-25694 are fixed in PostgreSQL 13.1 (For Linux)Linux
Vulnerabilities CVE-2020-25696,CVE-2020-25695,CVE-2020-25694 are fixed in PostgreSQL 12.5 (For Linux)Linux
Vulnerabilities CVE-2020-25696,CVE-2020-25695,CVE-2020-25694 are fixed in PostgreSQL 11.10 (For Linux)Linux
Vulnerabilities CVE-2020-25696,CVE-2020-25695,CVE-2020-25694 are fixed in PostgreSQL 10.15 (For Linux)Linux
Vulnerabilities CVE-2020-25696,CVE-2020-25695,CVE-2020-25694 are fixed in PostgreSQL 9.6.20 (For Linux)Linux
Vulnerabilities CVE-2020-25696,CVE-2020-25695,CVE-2020-25694 are fixed in PostgreSQL 9.5.24 (For Linux)Linux
CVE-2020-25696NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234