Lucene search

K
mageiaGentoo FoundationMGASA-2023-0064
HistoryFeb 27, 2023 - 11:27 p.m.

Updated postgresql packages fix security vulnerability

2023-02-2723:27:16
Gentoo Foundation
advisories.mageia.org
24
postgresql
security fix
memory disclosure
cve-2022-41862
client-server
kerberos
unix

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

0.001 Low

EPSS

Percentile

34.5%

Client memory disclosure when connecting, with Kerberos, to modified server. (CVE-2022-41862)

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

0.001 Low

EPSS

Percentile

34.5%