3.7

CVE-2022-41862: fedoraproject fedora

CVSS: 3.7v3.1LowModified
AliasesALPINE-CVE-2022-41862MGASA-2023-0064SUSE-SU-2023:0390-1
Published 03-03-2023Last modified 07-03-2025
Open JSON

Vulnerability summary

CVE-2022-41862 is a low (CVSS 3.7) vulnerability in fedoraproject fedora. EPSS estimates a 0.62% chance of exploitation in the next 30 days, higher than 48.8% of scored vulnerabilities.

Overall risk
15/100
0100
Low · default modelHow is this calculated?
CVSS score
3.7/10
010
Low · v3.1 (CVE.org)
EPSS score
0.62%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 12 · Related 4
OPENSUSE-SU-2024:14360-1OPENSUSE-SU-2025:15580-1RHSA-2023:1576RHSA-2023:1693RHSA-2023:4535RHSA-2023:7545

Timeline

  1. 03-03-2023
    PublishedVulnerability first disclosed.
  2. 07-03-2025
    Last modifiedVulnerability information updated.

Description

In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.

CVSS metrics

8 scores · 8 sources · 1 version

EPSS trend

Probability

0.62%

Chance of exploitation in the next 30 days

Percentile

49%

Versus all other CVEs

30-day change

0.00 pp

From 0.62% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.62%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse72 products
  • postgresql12&distro=SUSE Enterprise Storage 7< 12.14-150200.8.41.1
  • postgresql12&distro=SUSE Enterprise Storage 7.1< 12.14-150200.8.41.1
  • postgresql12&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 12.14-150100.3.37.1
  • postgresql12&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 12.14-150200.8.41.1
  • postgresql12&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS< 12.14-150200.8.41.1
Redhat9 products
Opensuse8 products
  • postgresql12&distro=openSUSE Leap 15.4< 12.14-150200.8.41.1
  • postgresql12&distro=openSUSE Tumbleweed< 12.14-1.1
  • postgresql13&distro=openSUSE Leap 15.4< 13.10-150200.5.37.1
  • postgresql13&distro=openSUSE Tumbleweed< 13.10-1.1
  • postgresql14&distro=openSUSE Leap 15.4< 14.7-150200.5.23.1
Alpine4 products
  • postgresql≥ 12.0, < 13.11-r0 | ≥ 12.0, < 13.10-r0
  • postgresql13< 13.10-r0
  • postgresql14< 14.7-r0
  • postgresql15< 15.2-r0
Mageia2 products
  • postgresql11< 11.19-1.mga8
  • postgresql13< 13.10-1.mga8
Ubuntu2 products
  • postgresql-12< 12.14-0ubuntu0.20.04.1
  • postgresql-14< 14.7-0ubuntu0.22.04.1
Chainguard1 product
  • postgresql-15< 15.2-r0
Debian1 product
  • postgresql-15< 15.2-1
Fedoraproject1 product
Postgresql1 product
  • postgresql≥ 12.0, < 12.14 | ≥ 13.0, < 13.10 | ≥ 14.0, < 14.7 | ≥ 15.0, < 15.2
Wolfi1 product
  • postgresql-15< 15.2-r0

11 vendors · 102 products

References

32 links
Show all 32 references