Cette page suit l'état du correctif pour Alpine Linux. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2022-41862 →
ALPINE-CVE-2022-41862
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certai...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Alpine:v3.13
postgresql
[{"type":"ECOSYSTEM","events":[{"introduced":"12.0"},{"fixed":"13.11-r0"}]}]
Alpine:v3.14
postgresql
[{"type":"ECOSYSTEM","events":[{"introduced":"12.0"},{"fixed":"13.10-r0"}]}]
Alpine:v3.15
postgresql13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.10-r0"}]}]
Alpine:v3.16
postgresql13
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.10-r0"}]}]
Alpine:v3.15
postgresql14
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.7-r0"}]}]
Alpine:v3.16
postgresql14
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.7-r0"}]}]
Alpine:v3.17
postgresql14
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.7-r0"}]}]
Alpine:v3.18
postgresql14
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.7-r0"}]}]
Alpine:v3.17
postgresql15
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2-r0"}]}]
Alpine:v3.18
postgresql15
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2-r0"}]}]
Alpine:v3.19
postgresql15
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2-r0"}]}]
Alpine:v3.20
postgresql15
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2-r0"}]}]
Références
- advisory security.alpinelinux.org