CVE-2022-41862

In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.

References

Affected packages

Git /

Affected ranges

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-41862.json"

unresolved_ranges

[
    {
        "events":  [
            {
                "introduced":  "12.0"
            },
            {
                "fixed":  "12.14"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "13.0"
            },
            {
                "fixed":  "13.10"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "14.0"
            },
            {
                "fixed":  "14.7"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "15.0"
            },
            {
                "fixed":  "15.2"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "last_affected":  "8"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "last_affected":  "8.0"
            }
        ]
    }
]