Lucene search
Broadcom Security ResponseBSNSA22190HistoryMay 19, 2023 - 12:00 a.m.
CVE-2022-1552 : Autovacuum, REINDEX, and others omit "security restricted operation" sandbox
2023-05-1900:00:00
Broadcom Security Response
support.broadcom.com
12
A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user’s objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity. More at: https://www.postgresql.org/support/security/CVE-2022-1552/
Products Confirmed Not Affected
- Brocade Fabric OS is NOT AFFECTED
- Brocade ASCG is NOT AFFECTED
- Brocade SANNav is UNDER INVESTIGATION
Related
nessus
nessus
Oracle Linux 7 : postgresql (ELSA-2022-5162)
2022-06-22 00:00:00
AlmaLinux 8 : postgresql:12 (ALSA-2022:4807)
2022-06-06 00:00:00
SUSE SLES12 Security Update : postgresql14 (SUSE-SU-2022:1874-1)
2022-05-28 00:00:00
debian
debian
[SECURITY] [DSA 5136-1] postgresql-13 security update
2022-05-12 19:28:35
[SECURITY] [DSA 5135-1] postgresql-11 security update
2022-05-12 19:28:08
oraclelinux
oraclelinux
postgresql:12 security update
2022-06-01 00:00:00
postgresql:13 security update
2022-06-02 00:00:00
postgresql security update
2022-06-30 00:00:00
suse
suse
Security update for postgresql10 (important)
2022-05-31 00:00:00
Security update for postgresql12 (important)
2022-05-31 00:00:00
Security update for postgresql14 (important)
2022-06-01 00:00:00
ibm
ibm
debiancve
debiancve
CVE-2022-1552
2022-08-31 16:15:00
osv
osv
BIT-postgresql-2022-1552
2024-03-06 11:04:04
Important: postgresql:12 security update
2022-05-31 07:56:56
postgresql-10, postgresql-12, postgresql-13, postgresql-14 vulnerability
2022-05-24 11:46:11
openvas
openvas
Ubuntu: Security Advisory (USN-5676-1)
2022-10-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1869-1)
2022-05-30 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1890-1)
2022-06-01 00:00:00
freebsd
freebsd
PostgreSQL Server -- execute arbitrary SQL code as DBA user
2022-05-11 00:00:00
rocky
rocky
postgresql:12 security update
2022-05-31 07:56:56
postgresql:13 security update
2022-06-01 13:45:22
postgresql security update
2022-05-30 07:19:50
almalinux
almalinux
Important: postgresql:10 security update
2022-05-30 11:39:32
Important: postgresql:12 security update
2022-05-31 07:56:56
redhat
redhat
(RHSA-2022:4915) Important: rh-postgresql12-postgresql security update
2022-06-06 06:50:06
(RHSA-2022:4807) Important: postgresql:12 security update
2022-05-31 07:56:56
(RHSA-2022:4894) Important: postgresql:10 security update
2022-06-02 09:21:25
altlinux
altlinux
Security fix for the ALT Linux 10 package postgresql14-1C version 14.3-alt1
2022-05-13 00:00:00
Security fix for the ALT Linux 10 package postgresql11 version 11.16-alt1
2022-05-13 00:00:00
amazon
amazon
Important: postgresql
2022-09-01 21:09:00
ubuntucve
ubuntucve
CVE-2022-1552
2022-05-12 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-1552 affecting package postgresql 14.2-2
2022-10-05 23:33:47
CVE-2022-1552 affecting package postgresql 12.8-1
2022-10-13 00:40:15
alpinelinux
alpinelinux
CVE-2022-1552
2022-08-31 16:15:00
ubuntu
ubuntu
PostgreSQL vulnerability
2022-05-24 00:00:00
PostgreSQL vulnerability
2022-10-13 00:00:00
cloudfoundry
cloudfoundry
USN-5440-1: PostgreSQL vulnerability | Cloud Foundry
2022-07-28 00:00:00
centos
centos
postgresql security update
2022-08-02 19:22:33
veracode
veracode
SQL Injection
2022-05-16 15:11:30
cve
cve
CVE-2022-1552
2022-08-31 16:15:00
redhatcve
redhatcve
CVE-2022-1552
2022-05-13 10:26:11
kaspersky
kaspersky
KLA12537 PE vulnerability in PostgreSQL
2022-05-12 00:00:00
mageia
mageia
Updated postgresql packages fix security vulnerability
2022-05-22 16:36:26
Updated postgresql packages fix security vulnerability
2022-08-29 08:07:41
redos
redos
ROS-20220530-02
2022-05-30 00:00:00
prion
prion
Design/Logic Flaw
2022-08-31 16:15:00
virtuozzo
virtuozzo
Virtuozzo Hybrid Infrastructure 4.7 Update 1.4 (4.7.1-53)
2022-05-25 00:00:00
Virtuozzo Hybrid Infrastructure 5.0 Update 1.3 (5.0.1-57)
2022-05-25 00:00:00
gentoo
gentoo
PostgreSQL: Multiple Vulnerabilities
2022-11-19 00:00:00