CVE-2022-41862
LOWPostgreSQL - Info Disclosure
Title source: llmDescription
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
Scores
CVSS v3
3.7
EPSS
0.0025
EPSS Percentile
48.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Classification
CWE
CWE-200
Status
published
Affected Products (6)
postgresql/postgresql
< 12.14
fedoraproject/fedora
redhat/integration_camel_k
redhat/integration_camel_quarkus
redhat/integration_service_registry
redhat/enterprise_linux
Timeline
Published
Mar 03, 2023
Tracked Since
Feb 18, 2026