Is CVE-2025-4207 in the CISA KEV catalog?

No. CVE-2025-4207 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2025-4207?

CVE-2025-4207 has a CVSS v3 base score of 5.9 (MEDIUM).

What is the EPSS score for CVE-2025-4207?

CVE-2025-4207 has an EPSS score of 0.61% (45th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2025-4207?

Upgrade postgresql-13 on debian 11 to 13.21-0+deb11u1 or later. Fixes are available for 93 affected products.

CVE & CISA-KEV Catalog

CVE-2025-4207

MEDIUM

5.9

CVSS v3

NVD

Description

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.

CWE-126Buffer Over-read

How to fix

Remediation Available

postgresql-13Debian

Fixed in:13.21-0+deb11u1CVE-2025-4207

pg_repackRocky

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.src::postgresql:15RHSA-2025:15022

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.s390x::postgresql:16RHSA-2025:14899

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.ppc64le::postgresql:16RHSA-2025:14899

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.aarch64::postgresql:16RHSA-2025:14899

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.src::postgresql:16RHSA-2025:14899

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.src::postgresql:16RHSA-2025:14827

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.aarch64::postgresql:16RHSA-2025:14827

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.x86_64::postgresql:15RHSA-2025:14862

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.s390x::postgresql:15RHSA-2025:14862

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.x86_64::postgresql:15RHSA-2025:15022

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.ppc64le::postgresql:16RHSA-2025:14827

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.ppc64le::postgresql:15RHSA-2025:14862

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.aarch64::postgresql:15RHSA-2025:14862

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.s390x::postgresql:16RHSA-2025:14827

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.src::postgresql:15RHSA-2025:14862

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.x86_64::postgresql:16RHSA-2025:14899

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.s390x::postgresql:15RHSA-2025:15022

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.x86_64::postgresql:16RHSA-2025:14827

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.ppc64le::postgresql:15RHSA-2025:15022

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.x86_64::postgresql:13RHSA-2025:15021

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.s390x::postgresql:13RHSA-2025:15021

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.ppc64le::postgresql:13RHSA-2025:15021

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.aarch64::postgresql:13RHSA-2025:15021

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.src::postgresql:13RHSA-2025:15021

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.aarch64::postgresql:15RHSA-2025:15022

pg_repackRed Hat / RHEL