Low severity3.7NVD Advisory· Published Mar 3, 2023· Updated Jun 17, 2026
CVE-2022-41862
CVE-2022-41862
Description
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
137- osv-coords128 versionspkg:apk/wolfi/postgresql-15-basepkg:apk/chainguard/libecpg-15pkg:apk/chainguard/postgresql-15-client-basepkg:apk/chainguard/postgresql-15-contribpkg:apk/wolfi/libecpg-15pkg:apk/wolfi/postgresql-15-bitnami-compatpkg:apk/wolfi/postgresql-15-clientpkg:apk/wolfi/postgresql-15-client-basepkg:rpm/opensuse/postgresql12&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/postgresql13&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/postgresql14&distro=openSUSE%20Tumbleweedpkg:apk/chainguard/ecpg-15pkg:apk/chainguard/postgresql-15pkg:apk/wolfi/postgresql-15pkg:apk/wolfi/postgresql-15-contribpkg:apk/wolfi/postgresql-15-devpkg:apk/wolfi/postgresql-15-oci-entrypointpkg:apk/wolfi/postgresql-15-oci-entrypoint-basepkg:rpm/almalinux/pgauditpkg:rpm/almalinux/postgresqlpkg:rpm/almalinux/postgresql-contribpkg:rpm/almalinux/postgresql-docspkg:rpm/almalinux/postgresql-plperlpkg:rpm/almalinux/postgresql-pltclpkg:rpm/almalinux/postgresql-serverpkg:rpm/almalinux/postgresql-server-develpkg:rpm/almalinux/postgresql-staticpkg:rpm/almalinux/postgresql-testpkg:rpm/almalinux/postgresql-test-rpm-macrospkg:rpm/almalinux/postgresql-upgradepkg:rpm/almalinux/postgresql-upgrade-develpkg:rpm/almalinux/postgresql-private-libspkg:rpm/almalinux/pg_repackpkg:rpm/opensuse/postgresql17&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/postgresql15&distro=openSUSE%20Tumbleweedpkg:apk/chainguard/libecpg-15-devpkg:apk/chainguard/libpq-15pkg:apk/chainguard/postgresql-15-basepkg:apk/chainguard/postgresql-15-bitnami-compatpkg:apk/chainguard/postgresql-15-clientpkg:apk/chainguard/postgresql-15-devpkg:apk/chainguard/postgresql-15-oci-entrypointpkg:apk/chainguard/postgresql-15-oci-entrypoint-basepkg:apk/wolfi/libpq-15pkg:apk/chainguard/postgresql-15-pgadmin-compatpkg:rpm/opensuse/postgresql16&distro=openSUSE%20Tumbleweedpkg:rpm/almalinux/postgres-decoderbufspkg:rpm/almalinux/postgresql-plpython3pkg:bitnami/postgresqlpkg:rpm/almalinux/postgresql-private-develpkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/postgresql15&distro=SUSE%20OpenStack%20Cloud%209pkg:rpm/suse/postgresql15&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOSpkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/postgresql12&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/postgresql12&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/opensuse/postgresql12&distro=openSUSE%20Leap%2015.4pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP4pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOSpkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/postgresql15&distro=SUSE%20Manager%20Proxy%204.2pkg:rpm/suse/postgresql15&distro=SUSE%20Manager%20Server%204.2pkg:rpm/suse/postgresql15&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/opensuse/postgresql15&distro=openSUSE%20Leap%2015.4pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOSpkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/postgresql13&distro=SUSE%20Manager%20Proxy%204.2pkg:rpm/suse/postgresql13&distro=SUSE%20Manager%20Server%204.2pkg:rpm/suse/postgresql13&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/postgresql13&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/opensuse/postgresql13&distro=openSUSE%20Leap%2015.4pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP4pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOSpkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/postgresql14&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/postgresql14&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/opensuse/postgresql14&distro=openSUSE%20Leap%2015.4pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/postgresql15&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/postgresql14&distro=SUSE%20Manager%20Proxy%204.2pkg:rpm/suse/postgresql14&distro=SUSE%20Manager%20Server%204.2pkg:rpm/almalinux/libpqpkg:rpm/almalinux/libpq-devel
< 15.2-r0+ 127 more
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 12.14-1.1
- (no CPE)range: < 13.10-1.1
- (no CPE)range: < 14.7-1.1
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 1.5.0-1.module_el8.6.0+2760+1746ec94
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.el9_1
- (no CPE)range: < 1.4.6-3.module_el8.6.0+2760+1746ec94
- (no CPE)range: < 17.6-2.1
- (no CPE)range: < 15.2-1.1
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 16.4-1.1
- (no CPE)range: < 0.10.0-2.module_el8.6.0+2760+1746ec94
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: >= 12.0.0, < 12.14.0
- (no CPE)range: < 13.10-1.el9_1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 12.14-3.36.1
- (no CPE)range: < 12.14-3.36.1
- (no CPE)range: < 12.14-3.36.1
- (no CPE)range: < 13.10-3.30.1
- (no CPE)range: < 14.7-3.20.1
- (no CPE)range: < 14.7-3.20.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150100.3.37.1
- (no CPE)range: < 12.14-150100.3.37.1
- (no CPE)range: < 12.14-150100.3.37.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 13.10-3.30.1
- (no CPE)range: < 13.10-3.30.1
- (no CPE)range: < 14.7-3.20.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 13.11-1.el9
- (no CPE)range: < 13.11-1.el9
(expand)+ 2 more
- (no CPE)
- (no CPE)
- cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*range: >=12.0,<12.14
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:integration_camel_k:-:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:integration_camel_quarkus:-:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:integration_service_registry:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- www.postgresql.org/support/security/CVE-2022-41862/nvdVendor Advisory
- security.netapp.com/advisory/ntap-20230427-0002/nvd
News mentions
0No linked articles in our index yet.