This page tracks the Alpine Linux fix status. The vulnerability itself is described on the main CVE page.
View CVE-2022-41862 →
ALPINE-CVE-2022-41862
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certai...
Original description
The description as published by the source.
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Alpine:v3.13
postgresql
[{"type":"ECOSYSTEM","events":[{"introduced":"12.0"},{"fixed":"13.11-r0"}]}]
Alpine:v3.14
postgresql
[{"type":"ECOSYSTEM","events":[{"introduced":"12.0"},{"fixed":"13.10-r0"}]}]
Alpine:v3.15
postgresql13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.10-r0"}]}]
Alpine:v3.16
postgresql13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.10-r0"}]}]
Alpine:v3.15
postgresql14
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.7-r0"}]}]
Alpine:v3.16
postgresql14
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.7-r0"}]}]
Alpine:v3.17
postgresql14
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.7-r0"}]}]
Alpine:v3.18
postgresql14
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.7-r0"}]}]
Alpine:v3.17
postgresql15
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2-r0"}]}]
Alpine:v3.18
postgresql15
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2-r0"}]}]
Alpine:v3.19
postgresql15
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2-r0"}]}]
Alpine:v3.20
postgresql15
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2-r0"}]}]
References
- advisory security.alpinelinux.org