CVE-2022-41862.json

{
    "CVE-ID": "CVE-2022-41862",
    "NVD": {
        "Descriptions": "In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.",
        "Cvss2_BaseScore": 0,
        "Cvss3_BaseScore": 3.7,
        "Cvss2_VectorString": "",
        "Cvss3_VectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
        "CPEs": [
            {
                "URI": "cpe:/o:redhat:enterprise_linux:8.0",
                "FormattedString": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/o:fedoraproject:fedora:8",
                "FormattedString": "cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:redhat:integration_service_registry:-",
                "FormattedString": "cpe:2.3:a:redhat:integration_service_registry:-:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:redhat:integration_camel_quarkus:-",
                "FormattedString": "cpe:2.3:a:redhat:integration_camel_quarkus:-:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:redhat:integration_camel_k:-",
                "FormattedString": "cpe:2.3:a:redhat:integration_camel_k:-:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "12.0",
                "VersionEndExcluding": "12.14",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "13.0",
                "VersionEndExcluding": "13.10",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "14.0",
                "VersionEndExcluding": "14.7",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "15.0",
                "VersionEndExcluding": "15.2",
                "VersionEndIncluding": ""
            }
        ]
    },
    "Official": {
        "12.14": {
            "source": [
                "https://www.postgresql.org/support/security/12/",
                "https://www.postgresql.org/docs/release/12.14/"
            ]
        },
        "13.10": {
            "source": [
                "https://www.postgresql.org/support/security/13/",
                "https://www.postgresql.org/docs/release/13.10/"
            ]
        },
        "14.7": {
            "source": [
                "https://www.postgresql.org/support/security/14/",
                "https://www.postgresql.org/docs/release/14.7/"
            ]
        },
        "15.2": {
            "source": [
                "https://www.postgresql.org/support/security/15/",
                "https://www.postgresql.org/docs/release/15.2/"
            ]
        }
    }
}