CVE-2025-8714
- Source
- https://cve.org/CVERecord?id=CVE-2025-8714
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8714.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-8714
- Aliases
- Downstream
ALPINE (1)
BELL (1)
CLEANSTART (12)
DEBIAN (1)
ECHO (1)
MGASA (1)
MINI (5)
OESA (11)
openSUSE (6)
RHSA (22)
- RHSA-2025:14826
- RHSA-2025:14827
- RHSA-2025:14862
- RHSA-2025:14869
- RHSA-2025:14870
- RHSA-2025:14878
- RHSA-2025:14899
- RHSA-2025:15006
- RHSA-2025:15012
- RHSA-2025:15013
- RHSA-2025:15014
- RHSA-2025:15015
- RHSA-2025:15021
- RHSA-2025:15022
- RHSA-2025:15031
- RHSA-2025:15034
- RHSA-2025:15057
- RHSA-2025:15062
- RHSA-2025:15114
- RHSA-2025:15359
- RHSA-2025:15361
- RHSA-2025:16099
RLSA (8)
SUSE (18)
- SUSE-SU-2025:02842-1
- SUSE-SU-2025:02980-1
- SUSE-SU-2025:02981-1
- SUSE-SU-2025:02986-1
- SUSE-SU-2025:02987-1
- SUSE-SU-2025:02994-1
- SUSE-SU-2025:02995-1
- SUSE-SU-2025:03003-1
- SUSE-SU-2025:03004-1
- SUSE-SU-2025:03005-1
- SUSE-SU-2025:03005-2
- SUSE-SU-2025:03018-1
- SUSE-SU-2025:03018-2
- SUSE-SU-2025:03019-1
- SUSE-SU-2025:03019-2
- SUSE-SU-2025:03020-1
- SUSE-SU-2025:03030-1
- SUSE-SU-2025:03031-1
UBUNTU (1)
- Related
- Published
- 2025-08-14T13:15:37Z
- Modified
- 2026-04-16T04:39:52Z
- Summary
- [none]
- Details
-
Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands. pg_dumpall is also affected. pg_restore is affected when used to generate a plain-format dump. This is similar to MySQL CVE-2024-21096. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are affected.
- References