Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 25.04: USN-7520-2 critical: PostgreSQL DoS from malformed packets

ubuntu
Calendar Grey May 21, 2025
Dist Ubuntu Esm H88
Debian Security Advisory DSA-4932-1 exposes a severe MySQL vulnerability leading to service disruptions through specially designed traffic.
PostgreSQL could be made to crash if it received specially crafted network traffic.

Summary

PostgreSQL could be made to crash if it received specially crafted network

traffic.

Software Description:

- postgresql-17: Object-relational SQL database

Details:

USN-7520-1 fixed a vulnerability in PostgreSQL. This update provides the

corresponding updates for Ubuntu 25.04.

Original advisory details:

It was discovered that PostgreSQL incorrectly handled the GB18030

encoding. An attacker could possibly use this issue to cause PostgreSQL to

crash, resulting in a denial of service.

Topics%20covered

Topics Covered

security advisory bug fix DoS Ubuntu network traffic PostgreSQL

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
   postgresql-17                   17.5-0ubuntu0.25.04.1
   postgresql-client-17            17.5-0ubuntu0.25.04.1

This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart PostgreSQL to
make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7520-2

https://ubuntu.com/security/notices/USN-7520-1

CVE-2025-4207

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7520-2

Topics%20covered

Topics Covered

security advisory bug fix DoS Ubuntu network traffic PostgreSQL

Package Information

https://launchpad.net/ubuntu/+source/postgresql-17/17.5-0ubuntu0.25.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here