跳转到帖子

Amazon Linux 2023: CVE-2022-41862: Medium priority package update for postgresql15

recommended_posts

发布于
  • Members

Amazon Linux 2023: CVE-2022-41862: Medium priority package update for postgresql15

Severity
3
CVSS
(AV:N/AC:H/Au:N/C:P/I:N/A:N)
Published
02/09/2023
Created
02/14/2025
Added
02/14/2025
Modified
02/14/2025

Description

In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes. A flaw was found In PostgreSQL. A modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions, a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.

Solution(s)

  • amazon-linux-2023-upgrade-postgresql15
  • amazon-linux-2023-upgrade-postgresql15-contrib
  • amazon-linux-2023-upgrade-postgresql15-contrib-debuginfo
  • amazon-linux-2023-upgrade-postgresql15-debuginfo
  • amazon-linux-2023-upgrade-postgresql15-debugsource
  • amazon-linux-2023-upgrade-postgresql15-docs
  • amazon-linux-2023-upgrade-postgresql15-docs-debuginfo
  • amazon-linux-2023-upgrade-postgresql15-llvmjit
  • amazon-linux-2023-upgrade-postgresql15-llvmjit-debuginfo
  • amazon-linux-2023-upgrade-postgresql15-plperl
  • amazon-linux-2023-upgrade-postgresql15-plperl-debuginfo
  • amazon-linux-2023-upgrade-postgresql15-plpython3
  • amazon-linux-2023-upgrade-postgresql15-plpython3-debuginfo
  • amazon-linux-2023-upgrade-postgresql15-pltcl
  • amazon-linux-2023-upgrade-postgresql15-pltcl-debuginfo
  • amazon-linux-2023-upgrade-postgresql15-private-devel
  • amazon-linux-2023-upgrade-postgresql15-private-libs
  • amazon-linux-2023-upgrade-postgresql15-private-libs-debuginfo
  • amazon-linux-2023-upgrade-postgresql15-server
  • amazon-linux-2023-upgrade-postgresql15-server-debuginfo
  • amazon-linux-2023-upgrade-postgresql15-server-devel
  • amazon-linux-2023-upgrade-postgresql15-server-devel-debuginfo
  • amazon-linux-2023-upgrade-postgresql15-static
  • amazon-linux-2023-upgrade-postgresql15-test
  • amazon-linux-2023-upgrade-postgresql15-test-debuginfo
  • amazon-linux-2023-upgrade-postgresql15-test-rpm-macros
  • amazon-linux-2023-upgrade-postgresql15-upgrade
  • amazon-linux-2023-upgrade-postgresql15-upgrade-debuginfo
  • amazon-linux-2023-upgrade-postgresql15-upgrade-devel
  • amazon-linux-2023-upgrade-postgresql15-upgrade-devel-debuginfo

References

  • https://attackerkb.com/topics/cve-2022-41862
  • CVE - 2022-41862
  • https://alas.aws.amazon.com/AL2023/ALAS-2023-387.html
  • 查看数 694
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…