Lucene search
PRIOn knowledge basePRION:CVE-2022-1552HistoryAug 31, 2022 - 4:15 p.m.
Design/Logic Flaw
2022-08-3116:15:00
PRIOn knowledge base
www.prio-n.com
48
postgresql
incomplete safe operations
privileged user
arbitrary sql functions
security flaw
A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user’s objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.
| CPE | Name | Operator | Version |
|---|---|---|---|
| postgresql | ge | 14.0 | |
| postgresql | lt | 14.3 | |
| postgresql | ge | 13.0 | |
| postgresql | lt | 13.7 | |
| postgresql | ge | 12.0 | |
| postgresql | lt | 12.11 | |
| postgresql | ge | 11.0 | |
| postgresql | lt | 11.16 | |
| postgresql | ge | 10.0 | |
| postgresql | lt | 10.21 |
References
access.redhat.com/security/cve/CVE-2022-1552
bugzilla.redhat.com/show_bug.cgi?id=2081126
security.gentoo.org/glsa/202211-04
security.netapp.com/advisory/ntap-20221104-0005/
www.postgresql.org/about/news/postgresql-143-137-1211-1116-and-1021-released-2449/
www.postgresql.org/support/security/CVE-2022-1552/
Related
altlinux
altlinux
Security fix for the ALT Linux 10 package postgresql14 version 14.3-alt1
2022-05-13 00:00:00
Security fix for the ALT Linux 10 package postgresql14-1C version 14.3-alt1
2022-05-13 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:1894-1)
2022-06-01 00:00:00
Mageia: Security Advisory (MGASA-2022-0201)
2022-05-23 00:00:00
Huawei EulerOS: Security Advisory for postgresql (EulerOS-SA-2022-2231)
2022-08-18 00:00:00
osv
osv
Important: postgresql:13 security update
2022-06-01 13:45:22
postgresql-11 - security update
2022-05-12 00:00:00
Important: postgresql:10 security update
2022-05-30 11:39:32
rocky
rocky
postgresql:13 security update
2022-06-01 13:45:22
postgresql security update
2022-05-30 07:19:50
postgresql:10 security update
2022-05-30 11:39:32
cbl_mariner
cbl_mariner
CVE-2022-1552 affecting package postgresql 12.8-1
2022-10-13 00:40:15
CVE-2022-1552 affecting package postgresql for versions less than 14.5-1
2022-10-05 23:33:47
debian
debian
[SECURITY] [DSA 5135-1] postgresql-11 security update
2022-05-12 19:28:08
[SECURITY] [DSA 5136-1] postgresql-13 security update
2022-05-12 19:28:35
nessus
nessus
Debian DSA-5135-1 : postgresql-11 - security update
2022-05-13 00:00:00
RHEL 8 : postgresql:13 (RHSA-2022:4855)
2022-06-02 00:00:00
RHEL 8 : postgresql:10 (RHSA-2022:4854)
2022-06-02 00:00:00
oraclelinux
oraclelinux
postgresql:13 security update
2022-06-02 00:00:00
postgresql:10 security update
2022-06-01 00:00:00
postgresql security update
2022-06-22 00:00:00
redhat
redhat
(RHSA-2022:4894) Important: postgresql:10 security update
2022-06-02 09:21:25
(RHSA-2022:4854) Important: postgresql:10 security update
2022-06-01 13:45:18
(RHSA-2022:4893) Important: postgresql:12 security update
2022-06-02 23:57:20
ubuntucve
ubuntucve
CVE-2022-1552
2022-05-12 00:00:00
ibm
ibm
amazon
amazon
Important: postgresql
2022-09-01 21:09:00
Important: postgresql
2022-09-01 21:09:00
redhatcve
redhatcve
CVE-2022-1552
2022-05-13 10:26:11
veracode
veracode
SQL Injection
2022-05-16 15:11:30
almalinux
almalinux
Important: postgresql:12 security update
2022-05-31 07:56:56
Important: postgresql:10 security update
2022-05-30 11:39:32
cve
cve
CVE-2022-1552
2022-08-31 16:15:09
suse
suse
Security update for postgresql12 (important)
2022-05-31 00:00:00
Security update for postgresql10 (important)
2022-05-31 00:00:00
Security update for postgresql13 (important)
2022-05-31 00:00:00
ubuntu
ubuntu
PostgreSQL vulnerability
2022-10-13 00:00:00
PostgreSQL vulnerability
2022-05-24 00:00:00
cloudfoundry
cloudfoundry
USN-5440-1: PostgreSQL vulnerability | Cloud Foundry
2022-07-28 00:00:00
alpinelinux
alpinelinux
CVE-2022-1552
2022-08-31 16:15:09
nvd
nvd
CVE-2022-1552
2022-08-31 16:15:09
centos
centos
postgresql security update
2022-08-02 19:22:33
broadcom
broadcom
freebsd
freebsd
PostgreSQL Server -- execute arbitrary SQL code as DBA user
2022-05-11 00:00:00
debiancve
debiancve
CVE-2022-1552
2022-08-31 16:15:09
kaspersky
kaspersky
KLA12537 PE vulnerability in PostgreSQL
2022-05-12 00:00:00
mageia
mageia
Updated postgresql packages fix security vulnerability
2022-05-22 16:36:26
Updated postgresql packages fix security vulnerability
2022-08-29 08:07:41
redos
redos
ROS-20220530-02
2022-05-30 00:00:00
cvelist
cvelist
CVE-2022-1552
2022-08-31 00:00:00
virtuozzo
virtuozzo
Virtuozzo Hybrid Infrastructure 4.7 Update 1.4 (4.7.1-53)
2022-05-25 00:00:00
Virtuozzo Hybrid Infrastructure 5.0 Update 1.3 (5.0.1-57)
2022-05-25 00:00:00
gentoo
gentoo
PostgreSQL: Multiple Vulnerabilities
2022-11-19 00:00:00
hp
hp
HP Device Manager Vulnerability Update (5.0.12)
2024-01-26 00:00:00