このページは Alpine Linux 向けの修正状況です。脆弱性そのものの説明は CVE 本体のページにあります。
CVE-2022-41862 の詳細 →
ALPINE-CVE-2022-41862
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certai...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
出典: OSV.dev (Open Source Vulnerabilities) OSV
影響パッケージ
Alpine:v3.13
postgresql
[{"type":"ECOSYSTEM","events":[{"introduced":"12.0"},{"fixed":"13.11-r0"}]}]
Alpine:v3.14
postgresql
[{"type":"ECOSYSTEM","events":[{"introduced":"12.0"},{"fixed":"13.10-r0"}]}]
Alpine:v3.15
postgresql13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.10-r0"}]}]
Alpine:v3.16
postgresql13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.10-r0"}]}]
Alpine:v3.15
postgresql14
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.7-r0"}]}]
Alpine:v3.16
postgresql14
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.7-r0"}]}]
Alpine:v3.17
postgresql14
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.7-r0"}]}]
Alpine:v3.18
postgresql14
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.7-r0"}]}]
Alpine:v3.17
postgresql15
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2-r0"}]}]
Alpine:v3.18
postgresql15
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2-r0"}]}]
Alpine:v3.19
postgresql15
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2-r0"}]}]
Alpine:v3.20
postgresql15
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2-r0"}]}]
参照URL
- advisory security.alpinelinux.org