Lucene search
Veracode Vulnerability DatabaseVERACODE:39220HistoryFeb 11, 2023 - 11:04 p.m.
Information Disclosure
2023-02-1123:04:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
postgresql vulnerability
information disclosure
kerberos encryption
software vulnerability
unauthenticated server
libpq caller
attacker access
0.001 Low
EPSS
Percentile
34.6%
postgresql is vulnerable to Information Disclosure. The vulnerability exists because a modified, unauthenticated server can send an unterminated string during the establishment of kerberos transport encryption where a libpq’s caller makes that message accessible to the attacker.
References
bugzilla.redhat.com/show_bug.cgi?id=2165722
bugzilla.suse.com/show_bug.cgi?id=1208102
github.com/postgres/postgres/commit/626f2c1d6b85a6a0780460c7acc306bc2c326266
secdb.alpinelinux.org/edge/community.yaml
secdb.alpinelinux.org/edge/main.yaml
secdb.alpinelinux.org/v3.14/main.yaml
secdb.alpinelinux.org/v3.15/main.yaml
secdb.alpinelinux.org/v3.16/main.yaml
secdb.alpinelinux.org/v3.17/community.yaml
secdb.alpinelinux.org/v3.17/main.yaml
security.netapp.com/advisory/ntap-20230427-0002/
www.postgresql.org/support/security/CVE-2022-41862/
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0583-1)
2023-03-28 00:00:00
openSUSE: Security Advisory for postgresql12 (SUSE-SU-2023:0450-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0390-1)
2023-02-14 00:00:00
cvelist
cvelist
CVE-2022-41862
2023-03-03 00:00:00
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS : PostgreSQL vulnerability (USN-5906-1)
2023-03-02 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : postgresql14 (SUSE-SU-2023:0705-1)
2023-03-11 00:00:00
Amazon Linux 2 : libpq (ALASPOSTGRESQL12-2024-010)
2024-03-18 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package postgresql12 version 12.14-alt1
2023-02-20 00:00:00
Security fix for the ALT Linux 10 package postgresql15-1C version 15.2-alt1
2023-02-20 00:00:00
Security fix for the ALT Linux 10 package postgresql15 version 15.2-alt1
2023-02-20 00:00:00
oraclelinux
oraclelinux
libpq security update
2023-11-11 00:00:00
libpq security update
2023-11-17 00:00:00
postgresql security update
2023-04-11 00:00:00
nvd
nvd
CVE-2022-41862
2023-03-03 16:15:09
kaspersky
kaspersky
KLA20223 OSI vulnerability in PostgreSQL
2023-02-09 00:00:00
cgr
cgr
CVE-2022-41862 vulnerabilities
2024-05-19 03:07:16
ibm
ibm
ubuntu
ubuntu
PostgreSQL vulnerability
2023-03-02 00:00:00
mageia
mageia
Updated postgresql packages fix security vulnerability
2023-02-27 23:27:16
osv
osv
Low: libpq security update
2023-11-07 00:00:00
CVE-2022-41862
2023-03-03 16:15:09
postgresql-12, postgresql-14 vulnerability
2023-03-02 12:38:26
wolfi
wolfi
CVE-2022-41862 vulnerabilities
2024-07-01 09:08:36
cve
cve
CVE-2022-41862
2023-03-03 16:15:09
cbl_mariner
cbl_mariner
CVE-2022-41862 affecting package postgresql for versions less than 14.11-1
2024-03-05 17:52:42
CVE-2022-41862 affecting package postgresql 12.15-1
2024-07-01 09:08:31
redhat
redhat
(RHSA-2023:7016) Low: libpq security update
2023-11-14 08:42:45
(RHSA-2023:6429) Low: libpq security update
2023-11-07 06:05:24
(RHSA-2023:1576) Moderate: postgresql:13 security update
2023-04-04 08:51:28
ubuntucve
ubuntucve
CVE-2022-41862
2023-02-10 00:00:00
almalinux
almalinux
Low: libpq security update
2023-11-07 00:00:00
Low: libpq security update
2023-11-14 00:00:00
Moderate: postgresql security update
2023-04-11 00:00:00
freebsd
freebsd
redhatcve
redhatcve
CVE-2022-41862
2023-02-15 15:29:59
alpinelinux
alpinelinux
CVE-2022-41862
2023-03-03 16:15:09
debiancve
debiancve
CVE-2022-41862
2023-03-03 16:15:09
prion
prion
Code injection
2023-03-03 16:15:00
debian
debian
[SECURITY] [DLA 3316-1] postgresql-11 security update
2023-02-10 13:33:02
cloudfoundry
cloudfoundry
USN-5906-1: PostgreSQL vulnerability | Cloud Foundry
2023-03-23 00:00:00
photon
photon
Low Photon OS Security Update - PHSA-2023-3.0-0531
2023-02-10 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0336
2023-02-18 00:00:00
rocky
rocky
postgresql:13 security update
2023-04-06 15:52:43
postgresql:12 security update
2023-10-06 23:10:12
redos
redos
ROS-20240329-12
2024-03-29 00:00:00
ROS-20240329-11
2024-03-29 00:00:00
hp
hp
HP Device Manager Vulnerability Update (5.0.12)
2024-01-26 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00