PT-2025-33267 · Unknown+10 · Postgresql+9

Dean Rasheed · Published 2025-08-13 · Updated 2026-04-02 · CVE-2025-8713

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: PostgreSQL (affected versions not specified)

Description: The PostgreSQL optimizer statistics feature can expose sampled data within a view, partition, or child table. This allows a user to read sampled data that they would not normally have access to.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

CWE-1230

Related Identifiers

ALT-PU-2025-10456

ALT-PU-2025-10476

ALT-PU-2025-10478

ALT-PU-2025-10479

ALT-PU-2025-10480

ALT-PU-2025-10481

ALT-PU-2025-10482

ALT-PU-2025-10926

ALT-PU-2025-10928

ALT-PU-2025-10929

ALT-PU-2025-10930

ALT-PU-2025-10931

ALT-PU-2025-10932

AZL-66300

AZL-66321

BDU:2025-09827

BIT-POSTGRESQL-2025-8713

CLEANSTART-2026-AI42483

CLEANSTART-2026-DJ71086

CLEANSTART-2026-EQ51133

CLEANSTART-2026-GI40937

CLEANSTART-2026-JA70776

CLEANSTART-2026-KA40024

CLEANSTART-2026-WY43835

CLEANSTART-2026-ZC18474

CVE-2025-8713

DLA-4273-1

ECHO-0871-700E-E8A8

MGASA-2025-0230

OESA-2025-2104

OESA-2025-2137

OESA-2025-2138

OESA-2025-2139

OESA-2025-2140

OESA-2025-2141

OESA-2025-2142

OESA-2025-2143

OESA-2025-2144

OESA-2025-2239

OESA-2025-2240

OPENSUSE-SU-2025:15450-1

OPENSUSE-SU-2025:15451-1

OPENSUSE-SU-2025:15452-1

OPENSUSE-SU-2025:15453-1

OPENSUSE-SU-2025:15455-1

RHSA-2025:14869

RHSA-2025:14870

RHSA-2025:14878

RHSA-2025:15013

RHSA-2025:15014

RHSA-2025:15015

RHSA-2025:15031

RHSA-2025:15057

RHSA-2025:15062

RHSA-2025:15114

RHSA-2025:15359

RHSA-2025_14827

RHSA-2025_14862

RHSA-2025_14878

SUSE-SU-2025:02842-1

SUSE-SU-2025:02980-1

SUSE-SU-2025:02981-1

SUSE-SU-2025:02986-1

SUSE-SU-2025:02987-1

SUSE-SU-2025:02994-1

SUSE-SU-2025:02995-1

SUSE-SU-2025:03003-1

SUSE-SU-2025:03004-1

SUSE-SU-2025:03005-1

SUSE-SU-2025:03005-2

SUSE-SU-2025:03018-1

SUSE-SU-2025:03018-2

SUSE-SU-2025:03019-1

SUSE-SU-2025:03019-2

SUSE-SU-2025:03020-1

SUSE-SU-2025:03030-1

SUSE-SU-2025:03031-1

SUSE-SU-2025_02980-1

SUSE-SU-2025_02981-1

SUSE-SU-2025_02986-1

SUSE-SU-2025_02987-1

SUSE-SU-2025_02994-1

SUSE-SU-2025_02995-1

SUSE-SU-2025_03003-1

SUSE-SU-2025_03004-1

SUSE-SU-2025_03005-1

SUSE-SU-2025_03005-2

SUSE-SU-2025_03018-1

SUSE-SU-2025_03018-2

SUSE-SU-2025_03019-1

SUSE-SU-2025_03019-2

SUSE-SU-2025_03020-1

SUSE-SU-2025_03030-1

SUSE-SU-2025_03031-1

USN-7741-1

Affected Products

Alt Linux

Debian

Ibm Aix

Linuxmint

Postgresql

Red Hat

Red Os

Suse

Ubuntu

Zvirt Node

References · 157

• https://osv.dev/vulnerability/OESA-2025-2139 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-8714 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2140 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-5870 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-10977 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-51477 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03018-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4273-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02980-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2240 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-8713 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-WY43835 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-GI40937 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15453-1 · Vendor Advisory