USN-7315-1: PostgreSQL vulnerability
Published Mar 3, 2025
·Updated
Stephen Fewer discovered that PostgreSQL incorrectly handled quoting syntax in certain scenarios. A remote attacker could possibly use this issue to perform SQL injection attacks.
Affected Software
16 affected componentsFixes available
All of the following
ubuntu/postgresql-16<16.8-0ubuntu0.24.10.1
16.8-0ubuntu0.24.10.1
Ubuntu Ubuntu=24.10
All of the following
ubuntu/postgresql-client-16<16.8-0ubuntu0.24.10.1
16.8-0ubuntu0.24.10.1
Ubuntu Ubuntu=24.10
All of the following
ubuntu/postgresql-16<16.8-0ubuntu0.24.04.1
16.8-0ubuntu0.24.04.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/postgresql-client-16<16.8-0ubuntu0.24.04.1
16.8-0ubuntu0.24.04.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/postgresql-14<14.17-0ubuntu0.22.04.1
14.17-0ubuntu0.22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/postgresql-client-14<14.17-0ubuntu0.22.04.1
14.17-0ubuntu0.22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/postgresql-12<12.22-0ubuntu0.20.04.2
12.22-0ubuntu0.20.04.2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/postgresql-client-12<12.22-0ubuntu0.20.04.2
12.22-0ubuntu0.20.04.2
Ubuntu Ubuntu=20.04
Event History
Mar 3, 2025
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-7315-1?
The severity of USN-7315-1 is significant due to the potential for SQL injection attacks.
2
How do I fix USN-7315-1?
To fix USN-7315-1, upgrade to the patched versions of PostgreSQL as specified in the advisory.
3
Which versions are affected by USN-7315-1?
USN-7315-1 affects PostgreSQL versions prior to 16.8-0ubuntu0.24.10.1 and other specified versions.
4
What type of attack is associated with USN-7315-1?
USN-7315-1 is associated with SQL injection attacks due to improper handling of quoting syntax.
5
Who discovered the vulnerability in USN-7315-1?
The vulnerability in USN-7315-1 was discovered by Stephen Fewer.