CVE-2020-25696: debian debian_linux Permissive List of Allowed Inputs
Vulnerability summary
CVE-2020-25696 is a high (CVSS 7.6) Permissive List of Allowed Inputs vulnerability in debian debian_linux. EPSS estimates a 2.70% chance of exploitation in the next 30 days, higher than 85.7% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 41 · Related 23Timeline
- 23-11-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive psql session uses \gset when querying a compromised server, the attacker can execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
2.70%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
0.00 pp
From 2.70% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-183Permissive List of Allowed InputsThe product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are explicitly allowed by policy because the inputs are assumed to be safe, but the list is too permissive - that is, it allows an input that is unsafe, leading to resultant weaknesses.
- CWE-697Incorrect ComparisonThe product compares two entities in a security-relevant context, but the comparison is incorrect.
Affected systems
Ubuntu4 products
- postgresql-10< 10.15-0ubuntu0.18.04.1
- postgresql-12< 12.5-0ubuntu0.20.04.1
- postgresql-9.3All versions (No fix recorded)
- postgresql-9.5< 9.5.24-0ubuntu0.16.04.1
Alpine3 products
- postgresql≥ 9.5.0, < 11.10-r0 | ≥ 9.5.0, < 12.5-r0
- postgresql14< 12.5-r0
- postgresql15< 12.5-r0
Debian2 products
- postgresql-13< 13.1-1
- debian_linuxEOL9.0
Postgresql1 product
- postgresql≥ 9.5.0, < 9.5.24 | ≥ 9.6.0, < 9.6.20 | ≥ 10.0, < 10.15 | ≥ 11.0, < 11.10 | ≥ 12.0, < 12.5 | ≥ 13.0, < 13.1
4 vendors · 10 products
References
10 links- www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/X Refsource MISCREPORTRelease NotesVendor Advisory
lists.debian.org/debian-lts-announce/2020/12/msg00005.htmlMailing ListX Refsource MLISTThird Party Advisory