CVE-2022-1552: postgresql Incomplete Cleanup
CVSS: 8.8v3.1HighModified
AliasesALPINE-CVE-2022-1552MGASA-2022-0201SUSE-SU-2022:1804-1SUSE-SU-2022:1835-1SUSE-SU-2022:1869-1SUSE-SU-2022:1874-1SUSE-SU-2022:1890-1SUSE-SU-2022:1894-1SUSE-SU-2022:1895-1SUSE-SU-2022:1908-1RHSA-2022:4771RHSA-2022:4805RHSA-2022:4807RHSA-2022:4854RHSA-2022:4855RHSA-2022:4856RHSA-2022:4857RHSA-2022:4893RHSA-2022:4894RHSA-2022:4895RHSA-2022:4913RHSA-2022:4915RHSA-2022:4929RHSA-2022:5162UBUNTU-CVE-2022-1552USN-5440-1USN-5676-1DEBIAN-CVE-2022-1552DSA-5135-1DSA-5136-1openSUSE-SU-2024:12072-1openSUSE-SU-2024:12073-1openSUSE-SU-2024:12075-1openSUSE-SU-2024:12076-1openSUSE-SU-2024:12077-1
Published 31-08-2022Last modified 03-08-2024
Vulnerability summary
CVE-2022-1552 is a high (CVSS 8.8) Incomplete Cleanup vulnerability in postgresql. EPSS estimates a 15.97% chance of exploitation in the next 30 days, higher than 96.8% of scored vulnerabilities.
CVSS score
8.8/10
010
High · v3.1 (NVD)EPSS score
15.97%
0%100%
Medium · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 6 · Related 5Timeline
- 31-08-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.
CVSS metrics
5 scores · 5 sources · 1 versionHigh 8.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 5 agree
- OSV · AlpineEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
15.97%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 15.97% on 19-09-2026
19-09-202619-10-2026
EPSS score15.97%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-459Incomplete CleanupThe product does not properly "clean up" and remove temporary or supporting resources after they have been used.
- CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
Affected systems
Suse87 products
- postgresql10&distro=HPE Helion OpenStack 8< 10.21-4.28.3
- postgresql10&distro=SUSE Enterprise Storage 6< 10.21-150100.8.47.1
- postgresql10&distro=SUSE Enterprise Storage 7< 10.21-150100.8.47.1
- postgresql10&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 10.21-150100.8.47.1
- postgresql10&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 10.21-150100.8.47.1
Redhat86 products
- pg_repack< 0:1.4.6-3.module+el8.5.0+11354+78b3c9c5 | < 0:1.4.6-3.module+el8.5.0+11357+bcc62552
- pg_repack-debuginfo< 0:1.4.6-3.module+el8.5.0+11354+78b3c9c5 | < 0:1.4.6-3.module+el8.5.0+11357+bcc62552
- pg_repack-debugsource< 0:1.4.6-3.module+el8.5.0+11354+78b3c9c5 | < 0:1.4.6-3.module+el8.5.0+11357+bcc62552
- pgaudit< 0:1.4.0-5.module+el8.5.0+11354+78b3c9c5 | < 0:1.5.0-1.module+el8.4.0+8873+b821c30a | < 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 | < 0:1.4.0-4.module+el8.2.0+9043+1dbb5661
- pgaudit-debuginfo< 0:1.4.0-5.module+el8.5.0+11354+78b3c9c5 | < 0:1.5.0-1.module+el8.4.0+8873+b821c30a | < 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 | < 0:1.4.0-4.module+el8.2.0+9043+1dbb5661
Opensuse13 products
- postgresql10&distro=openSUSE Leap 15.3< 10.21-150100.8.47.1
- postgresql10&distro=openSUSE Leap 15.4< 10.21-150100.8.47.1
- postgresql10&distro=openSUSE Tumbleweed< 10.19-2.7
- postgresql11&distro=openSUSE Tumbleweed< 11.16-1.1
- postgresql12&distro=openSUSE Leap 15.3< 12.11-150200.8.32.1
Ubuntu5 products
- postgresql-10< 10.21-0ubuntu0.18.04.1
- postgresql-12< 12.11-0ubuntu0.20.04.1
- postgresql-14< 14.3-0ubuntu0.22.04.1
- postgresql-9.3All versions (No fix recorded)
- postgresql-9.5< 9.5.25-0ubuntu0.16.04.1+esm2
Alpine4 products
- postgresql≥ 10.0, < 13.7-r0
- postgresql13< 13.7-r0
- postgresql14< 14.3-r0
- postgresql15< 14.3-r0
Debian2 products
- postgresql-11< 11.16-0+deb10u1
- postgresql-13< 13.7-0+deb11u1
Mageia2 products
- postgresql11< 11.16-1.mga8
- postgresql13< 13.7-1.mga8
Postgresql1 product
- postgresql≥ 10.0, < 10.21 | ≥ 11.0, < 11.16 | ≥ 12.0, < 12.11 | ≥ 13.0, < 13.7 | ≥ 14.0, < 14.3
8 vendors · 200 products · Showing 200 of 201. Use Open JSON for the complete list.
References
56 links- www.postgresql.org/about/news/postgresql-143-137-1211-1116-and-1021-released-2449/WEBARTICLEREPORTVendor Advisory
- security.netapp.com/advisory/ntap-20221104-0005/Third Party Advisory
