Lucene search
RedhatCVELIST:CVE-2022-1552HistoryAug 31, 2022 - 12:00 a.m.
CVE-2022-1552
2022-08-3100:00:00
CWE-459
redhat
www.cve.org
A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user’s objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.
CNA Affected
[
{
"vendor": "n/a",
"product": "postgresql",
"versions": [
{
"version": "Fixed in postgresql 14.3, postgresql 13.7, postgresql 12.11, postgresql 11.16, postgresql 10.21.",
"status": "affected"
}
]
}
]References
access.redhat.com/security/cve/CVE-2022-1552
bugzilla.redhat.com/show_bug.cgi?id=2081126
security.gentoo.org/glsa/202211-04
security.netapp.com/advisory/ntap-20221104-0005/
www.postgresql.org/about/news/postgresql-143-137-1211-1116-and-1021-released-2449/
www.postgresql.org/support/security/CVE-2022-1552/
Related
debiancve
debiancve
CVE-2022-1552
2022-08-31 16:15:09
redhat
redhat
(RHSA-2022:4807) Important: postgresql:12 security update
2022-05-31 07:56:56
(RHSA-2022:4915) Important: rh-postgresql12-postgresql security update
2022-06-06 06:50:06
(RHSA-2022:4856) Important: postgresql:12 security update
2022-06-01 13:45:17
suse
suse
Security update for postgresql10 (important)
2022-05-31 00:00:00
Security update for postgresql12 (important)
2022-05-31 00:00:00
Security update for postgresql13 (important)
2022-05-31 00:00:00
nessus
nessus
RHEL 8 : postgresql:12 (RHSA-2022:4807)
2022-05-31 00:00:00
SUSE SLED15 / SLES15 Security Update : postgresql14 (SUSE-SU-2022:1908-1)
2022-06-02 00:00:00
RHEL 8 : postgresql:10 (RHSA-2022:4895)
2022-06-04 00:00:00
oraclelinux
oraclelinux
postgresql:12 security update
2022-06-01 00:00:00
postgresql security update
2022-06-22 00:00:00
postgresql security update
2022-06-30 00:00:00
almalinux
almalinux
Important: postgresql:10 security update
2022-05-30 11:39:32
Important: postgresql:12 security update
2022-05-31 07:56:56
broadcom
broadcom
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:1869-1)
2022-05-30 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1890-1)
2022-06-01 00:00:00
Ubuntu: Security Advisory (USN-5676-1)
2022-10-14 00:00:00
debian
debian
[SECURITY] [DSA 5136-1] postgresql-13 security update
2022-05-12 19:28:35
[SECURITY] [DSA 5135-1] postgresql-11 security update
2022-05-12 19:28:08
osv
osv
postgresql-10, postgresql-12, postgresql-13, postgresql-14 vulnerability
2022-05-24 11:46:11
Important: postgresql:12 security update
2022-05-31 07:56:56
BIT-postgresql-2022-1552
2024-03-06 11:04:04
freebsd
freebsd
PostgreSQL Server -- execute arbitrary SQL code as DBA user
2022-05-11 00:00:00
rocky
rocky
postgresql:12 security update
2022-05-31 07:56:56
postgresql:10 security update
2022-05-30 11:39:32
postgresql:13 security update
2022-06-01 13:45:22
ibm
ibm
alpinelinux
alpinelinux
CVE-2022-1552
2022-08-31 16:15:09
nvd
nvd
CVE-2022-1552
2022-08-31 16:15:09
centos
centos
postgresql security update
2022-08-02 19:22:33
ubuntu
ubuntu
PostgreSQL vulnerability
2022-10-13 00:00:00
PostgreSQL vulnerability
2022-05-24 00:00:00
cloudfoundry
cloudfoundry
USN-5440-1: PostgreSQL vulnerability | Cloud Foundry
2022-07-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package postgresql15 version 14.3-alt1
2022-05-11 00:00:00
Security fix for the ALT Linux 10 package postgresql10 version 10.21-alt1
2022-05-13 00:00:00
redhatcve
redhatcve
CVE-2022-1552
2022-05-13 10:26:11
veracode
veracode
SQL Injection
2022-05-16 15:11:30
cve
cve
CVE-2022-1552
2022-08-31 16:15:09
kaspersky
kaspersky
KLA12537 PE vulnerability in PostgreSQL
2022-05-12 00:00:00
mageia
mageia
Updated postgresql packages fix security vulnerability
2022-05-22 16:36:26
Updated postgresql packages fix security vulnerability
2022-08-29 08:07:41
redos
redos
ROS-20220530-02
2022-05-30 00:00:00
prion
prion
Design/Logic Flaw
2022-08-31 16:15:00
ubuntucve
ubuntucve
CVE-2022-1552
2022-05-12 00:00:00
amazon
amazon
Important: postgresql
2022-09-01 21:09:00
Important: postgresql
2022-09-01 21:09:00
cbl_mariner
cbl_mariner
CVE-2022-1552 affecting package postgresql 12.8-1
2022-10-13 00:40:15
CVE-2022-1552 affecting package postgresql for versions less than 14.5-1
2022-10-05 23:33:47
virtuozzo
virtuozzo
Virtuozzo Hybrid Infrastructure 4.7 Update 1.4 (4.7.1-53)
2022-05-25 00:00:00
Virtuozzo Hybrid Infrastructure 5.0 Update 1.3 (5.0.1-57)
2022-05-25 00:00:00
gentoo
gentoo
PostgreSQL: Multiple Vulnerabilities
2022-11-19 00:00:00
hp
hp
HP Device Manager Vulnerability Update (5.0.12)
2024-01-26 00:00:00