KLA83544 DoS vulnerability in PostgreSQL

🗓️ 08 May 2025 00:00:00Reported by Kaspersky LabType

kaspersky

kaspersky🔗 threats.kaspersky.com👁 10 Views

Buffer over-read vulnerability in PostgreSQL causes denial of service; update to fix it.

Reporter	Title	Published	Views	Family All 234
IBM Security Bulletins	Security Bulletin: Buffer Over-read in PostgreSQL GB18030 Encoding Validation Leading to Potential DoS , affects watsonx.data	18 Sep 202514:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in PostgreSQL affect PowerVM VIOS	29 Apr 202618:54	–	ibm
IBM Security Bulletins	Security Bulletin: for Multiple CVEs : CVE-2024-10976 , CVE-2025-4207, CVE-2023-5870 and CVE-2025-1094	29 Oct 202510:29	–	ibm
FreeBSD	PostgreSQL -- PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation	8 May 202500:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : postgresql16, postgresql16-contrib, postgresql16-llvmjit (ALAS2023-2025-973)	2 Jun 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : postgresql15, postgresql15-contrib, postgresql15-llvmjit (ALAS2023-2025-974)	2 Jun 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : postgresql17, postgresql17-contrib, postgresql17-llvmjit (ALAS2023-2025-975)	2 Jun 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : postgresql (ALAS-2025-2902)	25 Jun 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : postgresql (ALASPOSTGRESQL13-2025-011)	29 May 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : postgresql (ALASPOSTGRESQL14-2025-018)	11 Jun 202500:00	–	nessus

Source	Link
postgresql	www.postgresql.org/support/security/CVE-2025-4207/
threats	www.threats.kaspersky.com/en/product/PostgreSQL/
statistics	www.statistics.securelist.com/

12 May 2025 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.15.9

EPSS0.00326

SSVC

postgresql vulnerability denial of service buffer over-read cve-2025-4207 system availability solution update