Unrated severityNVD Advisory· Published Mar 3, 2023· Updated Mar 7, 2025

CVE-2022-41862

Description

In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.

Affected products

129

PostgreSQL/PostgreSQLdescription
osv-coords128 versions
pkg:apk/chainguard/ecpg-15 pkg:apk/chainguard/libecpg-15 pkg:apk/chainguard/libecpg-15-dev pkg:apk/chainguard/libpq-15 pkg:apk/chainguard/postgresql-15 pkg:apk/chainguard/postgresql-15-base pkg:apk/chainguard/postgresql-15-bitnami-compat pkg:apk/chainguard/postgresql-15-client pkg:apk/chainguard/postgresql-15-client-base pkg:apk/chainguard/postgresql-15-contrib pkg:apk/chainguard/postgresql-15-dev pkg:apk/chainguard/postgresql-15-oci-entrypoint pkg:apk/chainguard/postgresql-15-oci-entrypoint-base pkg:apk/chainguard/postgresql-15-pgadmin-compat pkg:apk/wolfi/libecpg-15 pkg:apk/wolfi/libpq-15 pkg:apk/wolfi/postgresql-15 pkg:apk/wolfi/postgresql-15-base pkg:apk/wolfi/postgresql-15-bitnami-compat pkg:apk/wolfi/postgresql-15-client pkg:apk/wolfi/postgresql-15-client-base pkg:apk/wolfi/postgresql-15-contrib pkg:apk/wolfi/postgresql-15-dev pkg:apk/wolfi/postgresql-15-oci-entrypoint pkg:apk/wolfi/postgresql-15-oci-entrypoint-base pkg:bitnami/postgresql pkg:rpm/almalinux/libpq pkg:rpm/almalinux/libpq-devel pkg:rpm/almalinux/pgaudit pkg:rpm/almalinux/pg_repack pkg:rpm/almalinux/postgres-decoderbufs pkg:rpm/almalinux/postgresql pkg:rpm/almalinux/postgresql-contrib pkg:rpm/almalinux/postgresql-docs pkg:rpm/almalinux/postgresql-plperl pkg:rpm/almalinux/postgresql-plpython3 pkg:rpm/almalinux/postgresql-pltcl pkg:rpm/almalinux/postgresql-private-devel pkg:rpm/almalinux/postgresql-private-libs pkg:rpm/almalinux/postgresql-server pkg:rpm/almalinux/postgresql-server-devel pkg:rpm/almalinux/postgresql-static pkg:rpm/almalinux/postgresql-test pkg:rpm/almalinux/postgresql-test-rpm-macros pkg:rpm/almalinux/postgresql-upgrade pkg:rpm/almalinux/postgresql-upgrade-devel pkg:rpm/opensuse/postgresql12&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/postgresql12&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/postgresql13&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/postgresql13&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/postgresql14&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/postgresql14&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/postgresql15&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/postgresql15&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/postgresql16&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/postgresql17&distro=openSUSE%20Tumbleweed pkg:rpm/suse/postgresql12&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/postgresql12&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/postgresql12&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/postgresql13&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/postgresql13&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4 pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/postgresql13&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/postgresql13&distro=SUSE%20Manager%20Proxy%204.2 pkg:rpm/suse/postgresql13&distro=SUSE%20Manager%20Server%204.2 pkg:rpm/suse/postgresql14&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/postgresql14&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4 pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP4 pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/postgresql14&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/postgresql14&distro=SUSE%20Manager%20Proxy%204.2 pkg:rpm/suse/postgresql14&distro=SUSE%20Manager%20Server%204.2 pkg:rpm/suse/postgresql15&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/postgresql15&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4 pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP4 pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/postgresql15&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/postgresql15&distro=SUSE%20Manager%20Proxy%204.2 pkg:rpm/suse/postgresql15&distro=SUSE%20Manager%20Server%204.2 pkg:rpm/suse/postgresql15&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/postgresql15&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 15.2-r0+ 127 more
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: < 15.2-r0
- (no CPE)range: >= 12.0.0, < 12.14.0
- (no CPE)range: < 13.11-1.el9
- (no CPE)range: < 13.11-1.el9
- (no CPE)range: < 1.5.0-1.module_el8.6.0+2760+1746ec94
- (no CPE)range: < 1.4.6-3.module_el8.6.0+2760+1746ec94
- (no CPE)range: < 0.10.0-2.module_el8.6.0+2760+1746ec94
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.el9_1
- (no CPE)range: < 13.10-1.el9_1
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 13.10-1.module_el8.7.0+3498+cb1ef3c6
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-1.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-1.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-1.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-1.1
- (no CPE)range: < 16.4-1.1
- (no CPE)range: < 17.6-2.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150100.3.37.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-3.36.1
- (no CPE)range: < 12.14-150100.3.37.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-3.36.1
- (no CPE)range: < 12.14-150100.3.37.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-150200.8.41.1
- (no CPE)range: < 12.14-3.36.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-3.30.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-3.30.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-3.30.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 13.10-150200.5.37.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-3.20.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-3.20.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-3.20.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 14.7-150200.5.23.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-150200.5.6.1
- (no CPE)range: < 15.2-3.6.1
- (no CPE)range: < 15.2-3.6.1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000