Vulnerabilities > CVE-2022-2625

CVSS 8.0 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

postgresql

fedoraproject

redhat

NVD

Published: 2022-08-18

Updated: 2022-12-02

Summary

A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser.

Vulnerable Configurations

Part	Description	Count
Application	Postgresql Postgresql Postgresql 10.0 Postgresql Postgresql 10.1 Postgresql Postgresql 10.2 Postgresql Postgresql 10.3 Postgresql Postgresql 10.4 Postgresql Postgresql 10.5 Postgresql Postgresql 10.6 Postgresql Postgresql 10.7 Postgresql Postgresql 10.8 Postgresql Postgresql 10.9 Postgresql Postgresql 10.10 Postgresql Postgresql 10.11 Postgresql Postgresql 10.12 Postgresql Postgresql 10.13 Postgresql Postgresql 10.14 Postgresql Postgresql 10.15 Postgresql Postgresql 10.16 Postgresql Postgresql 10.17 Postgresql Postgresql 10.18 Postgresql Postgresql 10.19 Postgresql Postgresql 10.20 Postgresql Postgresql 10.21 Postgresql Postgresql 11.0 Postgresql Postgresql 11.1 Postgresql Postgresql 11.2 Postgresql Postgresql 11.3 Postgresql Postgresql 11.4 Postgresql Postgresql 11.5 Postgresql Postgresql 11.6 Postgresql Postgresql 11.7 Postgresql Postgresql 11.8 Postgresql Postgresql 11.9 Postgresql Postgresql 11.10 Postgresql Postgresql 11.11 Postgresql Postgresql 11.12 Postgresql Postgresql 11.13 Postgresql Postgresql 11.14 Postgresql Postgresql 11.15 Postgresql Postgresql 11.16 Postgresql Postgresql 12.0 Postgresql Postgresql 12.1 Postgresql Postgresql 12.2 Postgresql Postgresql 12.3 Postgresql Postgresql 12.4 Postgresql Postgresql 12.5 Postgresql Postgresql 12.6 Postgresql Postgresql 12.7 Postgresql Postgresql 12.8 Postgresql Postgresql 12.9 Postgresql Postgresql 12.10 Postgresql Postgresql 12.11 Postgresql Postgresql 13.0 Postgresql Postgresql 13.1 Postgresql Postgresql 13.2 Postgresql Postgresql 13.3 Postgresql Postgresql 13.4 Postgresql Postgresql 13.5 Postgresql Postgresql 13.6 Postgresql Postgresql 13.7 Postgresql Postgresql 14.0 Postgresql Postgresql 14.1 Postgresql Postgresql 14.2 Postgresql Postgresql 14.3 Postgresql Postgresql 14.4 Postgresql Postgresql 15	66
OS	Fedoraproject Fedoraproject Fedora 36	1
OS	Redhat Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0	4

Vulnerabilities > CVE-2022-2625 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2022-2625"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2022-2625