Vulnerability · Published Aug 31, 2022 · Assigned by redhat
CVE-2022-1552
High 8.8
In plain English
A high-severity security flaw in postgresql. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 17.0% (higher than 97% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)8.8High
Exploit odds (30 days)17.0%top 2.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | pg_repack | 1.4.6-3.module_el8.6.0+2758+4f4474df | ALSA-2022:4807 |
| AlmaLinux:8 | pg_repack | 1.4.6-3.module_el8.6.0+2760+1746ec94 | ALSA-2022:4807 |
| AlmaLinux:8 | pgaudit | 1.4.0-5.module_el8.6.0+2758+4f4474df | ALSA-2022:4807 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2758+4f4474df | ALSA-2022:4807 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2760+1746ec94 | ALSA-2022:4807 |
| AlmaLinux:8 | postgresql | 12.11-2.module_el8.6.0+2905+eb237fb8 | ALSA-2022:4807 |
| AlmaLinux:8 | postgresql | 10.21-2.module_el8.6.0+2901+a6abf8d9 | ALSA-2022:4805 |
| AlmaLinux:8 | postgresql-contrib | 12.11-2.module_el8.6.0+2905+eb237fb8 | ALSA-2022:4807 |
| AlmaLinux:8 | postgresql-contrib | 10.21-2.module_el8.6.0+2901+a6abf8d9 | ALSA-2022:4805 |
| AlmaLinux:8 | postgresql-docs | 10.21-2.module_el8.6.0+2901+a6abf8d9 | ALSA-2022:4805 |
| AlmaLinux:8 | postgresql-docs | 12.11-2.module_el8.6.0+2905+eb237fb8 | ALSA-2022:4807 |
| AlmaLinux:8 | postgresql-plperl | 12.11-2.module_el8.6.0+2905+eb237fb8 | ALSA-2022:4807 |
| AlmaLinux:8 | postgresql-plperl | 10.21-2.module_el8.6.0+2901+a6abf8d9 | ALSA-2022:4805 |
| AlmaLinux:8 | postgresql-plpython3 | 10.21-2.module_el8.6.0+2901+a6abf8d9 | ALSA-2022:4805 |
| AlmaLinux:8 | postgresql-plpython3 | 12.11-2.module_el8.6.0+2905+eb237fb8 | ALSA-2022:4807 |
| AlmaLinux:8 | postgresql-pltcl | 12.11-2.module_el8.6.0+2905+eb237fb8 | ALSA-2022:4807 |
| AlmaLinux:8 | postgresql-pltcl | 10.21-2.module_el8.6.0+2901+a6abf8d9 | ALSA-2022:4805 |
| AlmaLinux:8 | postgresql-server | 10.21-2.module_el8.6.0+2901+a6abf8d9 | ALSA-2022:4805 |
| AlmaLinux:8 | postgresql-server | 12.11-2.module_el8.6.0+2905+eb237fb8 | ALSA-2022:4807 |
| AlmaLinux:8 | postgresql-server-devel | 10.21-2.module_el8.6.0+2901+a6abf8d9 | ALSA-2022:4805 |
| AlmaLinux:8 | postgresql-server-devel | 12.11-2.module_el8.6.0+2905+eb237fb8 | ALSA-2022:4807 |
| AlmaLinux:8 | postgresql-static | 12.11-2.module_el8.6.0+2905+eb237fb8 | ALSA-2022:4807 |
| AlmaLinux:8 | postgresql-static | 10.21-2.module_el8.6.0+2901+a6abf8d9 | ALSA-2022:4805 |
| AlmaLinux:8 | postgresql-test | 10.21-2.module_el8.6.0+2901+a6abf8d9 | ALSA-2022:4805 |
| AlmaLinux:8 | postgresql-test | 12.11-2.module_el8.6.0+2905+eb237fb8 | ALSA-2022:4807 |
| AlmaLinux:8 | postgresql-test-rpm-macros | 10.21-2.module_el8.6.0+2901+a6abf8d9 | ALSA-2022:4805 |
| AlmaLinux:8 | postgresql-test-rpm-macros | 12.11-2.module_el8.6.0+2905+eb237fb8 | ALSA-2022:4807 |
| AlmaLinux:8 | postgresql-upgrade | 10.21-2.module_el8.6.0+2901+a6abf8d9 | ALSA-2022:4805 |
| AlmaLinux:8 | postgresql-upgrade | 12.11-2.module_el8.6.0+2905+eb237fb8 | ALSA-2022:4807 |
| AlmaLinux:8 | postgresql-upgrade-devel | 10.21-2.module_el8.6.0+2901+a6abf8d9 | ALSA-2022:4805 |
| AlmaLinux:8 | postgresql-upgrade-devel | 12.11-2.module_el8.6.0+2905+eb237fb8 | ALSA-2022:4807 |
| Alpine:v3.20 | postgresql14 | 14.3-r0 | ALPINE-CVE-2022-1552 |
| Alpine:v3.20 | postgresql15 | 14.3-r0 | ALPINE-CVE-2022-1552 |
| Rocky Linux:8 | pg_repack | 0:1.4.6-3.module+el8.5.0+684+c3892ef9 | RLSA-2022:4807 |
| Rocky Linux:8 | pg_repack | 0:1.4.6-3.module+el8.5.0+684+c3892ef9 | RLSA-2022:4855 |
| Rocky Linux:8 | pgaudit | 0:1.5.0-1.module+el8.5.0+684+c3892ef9 | RLSA-2022:4855 |
| Rocky Linux:8 | pgaudit | 0:1.4.0-5.module+el8.5.0+686+20453ecc | RLSA-2022:4807 |
| Rocky Linux:8 | pgaudit | 0:1.5.0-1.module+el8.4.0+546+3620623e | RLSA-2022:4855 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.5.0+684+c3892ef9 | RLSA-2022:4807 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.5.0+684+c3892ef9 | RLSA-2022:4855 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.4.0+424+71d47d9a | RLSA-2022:4807 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.4.0+424+71d47d9a | RLSA-2022:4855 |
| Rocky Linux:8 | postgresql | 0:12.11-2.module+el8.6.0+979+b6ef1a3a | RLSA-2022:4807 |
| Rocky Linux:8 | postgresql | 0:13.7-2.module+el8.6.0+980+9caa008a | RLSA-2022:4855 |
| Rocky Linux:8 | postgresql | 0:10.21-2.module+el8.6.0+977+ab6e685c | RLSA-2022:4805 |
| Rocky Linux:9 | postgresql | 0:13.7-1.el9_0 | RLSA-2022:4771 |
| Ubuntu:22.04:LTS | postgresql-14 | 14.3-0ubuntu0.22.04.1 | USN-5440-1 |
| Ubuntu:22.04:LTS | postgresql-14 | 14.3-0ubuntu0.22.04.1 | UBUNTU-CVE-2022-1552 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | postgresql | Fixed in postgresql 14.3, postgresql 13.7, postgresql 12.11, postgresql 11.16, postgresql 10.21. |
Weakness: CWE-459
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2081126
- https://www.postgresql.org/about/news/postgresql-143-137-1211-1116-and-1021-released-2449/
- https://www.postgresql.org/support/security/CVE-2022-1552/
- https://access.redhat.com/security/cve/CVE-2022-1552
- https://security.netapp.com/advisory/ntap-20221104-0005/
- GLSA-202211-04 vendor-advisory