Skip to content
OpenAdvisories
Unscored CVE-2022-1552 EUVD-2022-24847GHSA-3f3c-74mp-823m

A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another u…

Published Aug 31, 2022 · Updated Aug 3, 2024 · Assigned by redhat

Description

A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.

Affected products

VendorProductAffectedFixed
— postgresql Fixed in postgresql 14.3, postgresql 13.7, postgresql 12.11, postgresql 11.16, postgresql 10.21. —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 11 postgresql-13 13.7-0+deb11u1 DSA-5136-1
Debian 10 postgresql-11 11.16-0+deb10u1 DSA-5135-1
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS postgresql-14 14.3-0ubuntu0.22.04.1 USN-5440-1
Ubuntu 20.04 LTS postgresql-12 12.11-0ubuntu0.20.04.1 USN-5440-1
Ubuntu 18.04 LTS postgresql-10 10.21-0ubuntu0.18.04.1 USN-5440-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS postgresql-9.5 9.5.25-0ubuntu0.16.04.1+esm2 USN-5676-1
Ubuntu Pro 14.04 LTS postgresql-9.3 No fix yet —
ReleasePackageFixed inAdvisory
RHEL 9 postgresql +10 13.7-1.el9_0 RHSA-2022:4771
RHEL 8 pg_repack 1.4.6-3.module+el8.5.0+11354+78b3c9c5 RHSA-2022:4855, RHSA-2022:4807
RHEL 8 pgaudit 1.4.0-5.module+el8.5.0+11354+78b3c9c5 RHSA-2022:4855, RHSA-2022:4807
RHEL 8 postgres-decoderbufs 0.10.0-2.module+el8.4.0+8873+b821c30a RHSA-2022:4855, RHSA-2022:4807
RHEL 8 postgresql +12 10.21-2.module+el8.6.0+15342+53518fac RHSA-2022:4855, RHSA-2022:4807, RHSA-2022:4805
RHEL 7 postgresql +11 9.2.24-8.el7_9 RHSA-2022:5162
RHEL 3 rh-postgresql10-postgresql +13 10.21-1.el7 RHSA-2022:4913
RHEL 3 rh-postgresql12-postgresql +13 12.11-1.el7 RHSA-2022:4915
RHEL 3 rh-postgresql13-postgresql +14 13.7-1.el7 RHSA-2022:4929
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 8.4 EUS pgaudit 1.4.0-6.module+el8.4.0+11288+c193d6d7 RHSA-2022:4857, RHSA-2022:4856
RHEL 8.4 EUS postgres-decoderbufs 0.10.0-2.module+el8.4.0+8873+b821c30a RHSA-2022:4857, RHSA-2022:4856
RHEL 8.4 EUS postgresql +12 10.21-2.module+el8.4.0+15341+25c9f2fe RHSA-2022:4857, RHSA-2022:4856, RHSA-2022:4854
RHEL 8.2 EUS pgaudit 1.4.0-4.module+el8.2.0+9043+1dbb5661 RHSA-2022:4893
RHEL 8.2 EUS postgres-decoderbufs 0.10.0-2.module+el8.2.0+9043+1dbb5661 RHSA-2022:4893
RHEL 8.2 EUS postgresql +12 10.21-2.module+el8.2.0+15340+c4468608 RHSA-2022:4895, RHSA-2022:4893
RHEL 8.1 E4S postgresql +12 10.21-2.module+el8.1.0+15339+34e1e10d RHSA-2022:4894

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 pg_repack 1.4.6-3.module_el8.6.0+2758+4f4474df ALSA-2022:4807
AlmaLinux 8 pgaudit 1.4.0-5.module_el8.6.0+2758+4f4474df ALSA-2022:4807
AlmaLinux 8 postgres-decoderbufs 0.10.0-2.module_el8.6.0+2758+4f4474df ALSA-2022:4807
AlmaLinux 8 postgresql +12 10.21-2.module_el8.6.0+2901+a6abf8d9 ALSA-2022:4807, ALSA-2022:4805

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 postgresql 13.7-1.el9_0 RLSA-2022:4771
Rocky Linux 8 pg_repack 1.4.6-3.module+el8.5.0+684+c3892ef9 RLSA-2022:4855, RLSA-2022:4807
Rocky Linux 8 pgaudit 1.4.0-5.module+el8.5.0+686+20453ecc RLSA-2022:4855, RLSA-2022:4807
Rocky Linux 8 postgres-decoderbufs 0.10.0-2.module+el8.4.0+424+71d47d9a RLSA-2022:4855, RLSA-2022:4807
Rocky Linux 8 postgresql 10.21-2.module+el8.6.0+977+ab6e685c RLSA-2022:4855, RLSA-2022:4807, RLSA-2022:4805
ReleasePackageFixed inAdvisory
SLES 15 SP4 postgresql13 13.7-150200.5.28.1 SUSE-SU-2022:1895-1
SLES 15 SP4 postgresql14 14.3-150200.5.12.2 SUSE-SU-2022:1908-1
SLES 15 SP3 postgresql10 10.21-150100.8.47.1 SUSE-SU-2022:1890-1
SLES 15 SP3 postgresql12 12.11-150200.8.32.1 SUSE-SU-2022:1894-1
SLES 15 SP3 postgresql13 13.7-150200.5.28.1 SUSE-SU-2022:1895-1
SLES 15 SP3 postgresql14 14.3-150200.5.12.2 SUSE-SU-2022:1908-1
SLES 15 SP2 postgresql10 10.21-150100.8.47.1 SUSE-SU-2022:1890-1
SLES 15 SP2 postgresql12 12.11-150200.8.32.1 SUSE-SU-2022:1894-1
SLES 15 SP2 postgresql13 13.7-150200.5.28.1 SUSE-SU-2022:1895-1
SLES 15 SP2 postgresql14 14.3-150200.5.12.2 SUSE-SU-2022:1908-1
SLES 15 SP1 postgresql 12.0.1-150000.8.19.1 SUSE-SU-2022:2893-1
SLES 15 SP1 postgresql10 10.21-150100.8.47.1 SUSE-SU-2022:1890-1
SLES 15 SP1 postgresql12 12.12-150100.3.33.1 SUSE-SU-2022:2958-1
SLES 15 postgresql 12.0.1-150000.8.19.1 SUSE-SU-2022:2893-1
SLES 15 postgresql10 10.22-150000.4.42.1 SUSE-SU-2022:2893-1
Show 23 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 postgresql10 10.21-4.28.3 SUSE-SU-2022:1804-1
SLES 12 SP5 postgresql12 12.11-3.27.3 SUSE-SU-2022:1869-1
SLES 12 SP5 postgresql13 13.7-3.21.3 SUSE-SU-2022:1835-1
SLES 12 SP5 postgresql14 14.3-3.9.3 SUSE-SU-2022:1874-1
SLES 12 SP4 postgresql10 10.21-4.28.3 SUSE-SU-2022:1804-1
SLES 12 SP4 postgresql14 14.3-3.9.3 SUSE-SU-2022:1874-1
SLES 12 SP3 postgresql10 10.21-4.28.3 SUSE-SU-2022:1804-1
SLES 12 SP3 postgresql14 14.3-3.9.3 SUSE-SU-2022:1874-1
SLES 12 SP2 postgresql10 10.21-4.28.3 SUSE-SU-2022:1804-1
SLES 12 SP2 postgresql14 14.3-3.9.3 SUSE-SU-2022:1874-1
SLES for SAP 15 SP2 postgresql10 10.21-150100.8.47.1 SUSE-SU-2022:1890-1
SLES for SAP 15 SP2 postgresql12 12.11-150200.8.32.1 SUSE-SU-2022:1894-1
SLES for SAP 15 SP2 postgresql13 13.7-150200.5.28.1 SUSE-SU-2022:1895-1
SLES for SAP 15 SP2 postgresql14 14.3-150200.5.12.2 SUSE-SU-2022:1908-1
SLES for SAP 15 SP1 postgresql 12.0.1-150000.8.19.1 SUSE-SU-2022:2893-1
SLES for SAP 15 SP1 postgresql10 10.21-150100.8.47.1 SUSE-SU-2022:1890-1
SLES for SAP 15 SP1 postgresql12 12.12-150100.3.33.1 SUSE-SU-2022:2958-1
SLES for SAP 15 postgresql 12.0.1-150000.8.19.1 SUSE-SU-2022:2893-1
SLES for SAP 15 postgresql10 10.22-150000.4.42.1 SUSE-SU-2022:2893-1
SLES for SAP 12 SP5 postgresql10 10.21-4.28.3 SUSE-SU-2022:1804-1
SLES for SAP 12 SP5 postgresql12 12.11-3.27.3 SUSE-SU-2022:1869-1
SLES for SAP 12 SP5 postgresql13 13.7-3.21.3 SUSE-SU-2022:1835-1
SLES for SAP 12 SP5 postgresql14 14.3-3.9.3 SUSE-SU-2022:1874-1
SLES for SAP 12 SP4 postgresql10 10.21-4.28.3 SUSE-SU-2022:1804-1
SLES for SAP 12 SP4 postgresql14 14.3-3.9.3 SUSE-SU-2022:1874-1
SLES for SAP 12 SP3 postgresql10 10.21-4.28.3 SUSE-SU-2022:1804-1
SLES for SAP 12 SP3 postgresql14 14.3-3.9.3 SUSE-SU-2022:1874-1
SLE HPC 15 SP2 postgresql10 10.21-150100.8.47.1 SUSE-SU-2022:1890-1
SLE HPC 15 SP2 postgresql12 12.11-150200.8.32.1 SUSE-SU-2022:1894-1
SLE HPC 15 SP2 postgresql13 13.7-150200.5.28.1 SUSE-SU-2022:1895-1
SLE HPC 15 SP2 postgresql14 14.3-150200.5.12.2 SUSE-SU-2022:1908-1
SLE HPC 15 SP1 postgresql 12.0.1-150000.8.19.1 SUSE-SU-2022:2893-1
SLE HPC 15 SP1 postgresql10 10.21-150100.8.47.1 SUSE-SU-2022:1890-1
SLE HPC 15 SP1 postgresql12 12.12-150100.3.33.1 SUSE-SU-2022:2958-1
SLE HPC 15 postgresql 12.0.1-150000.8.19.1 SUSE-SU-2022:2893-1
SLE HPC 15 postgresql10 10.22-150000.4.42.1 SUSE-SU-2022:2893-1
SUSE OpenStack Cloud Crowbar 9 postgresql10 10.21-4.28.3 SUSE-SU-2022:1804-1
SUSE OpenStack Cloud Crowbar 9 postgresql14 14.3-3.9.3 SUSE-SU-2022:1874-1
SUSE OpenStack Cloud Crowbar 8 postgresql10 10.21-4.28.3 SUSE-SU-2022:1804-1
SUSE OpenStack Cloud Crowbar 8 postgresql14 14.3-3.9.3 SUSE-SU-2022:1874-1
SUSE OpenStack Cloud 9 postgresql10 10.21-4.28.3 SUSE-SU-2022:1804-1
SUSE OpenStack Cloud 9 postgresql14 14.3-3.9.3 SUSE-SU-2022:1874-1
SUSE OpenStack Cloud 8 postgresql10 10.21-4.28.3 SUSE-SU-2022:1804-1
SUSE OpenStack Cloud 8 postgresql14 14.3-3.9.3 SUSE-SU-2022:1874-1
SUSE Manager Server 4.1 postgresql10 10.21-150100.8.47.1 SUSE-SU-2022:1890-1
SUSE Manager Server 4.1 postgresql12 12.11-150200.8.32.1 SUSE-SU-2022:1894-1
SUSE Manager Server 4.1 postgresql13 13.7-150200.5.28.1 SUSE-SU-2022:1895-1
SUSE Manager Server 4.1 postgresql14 14.3-150200.5.12.2 SUSE-SU-2022:1908-1
SUSE Manager Retail Branch Server 4.1 postgresql10 10.21-150100.8.47.1 SUSE-SU-2022:1890-1
SUSE Manager Retail Branch Server 4.1 postgresql12 12.11-150200.8.32.1 SUSE-SU-2022:1894-1
SUSE Manager Retail Branch Server 4.1 postgresql13 13.7-150200.5.28.1 SUSE-SU-2022:1895-1
SUSE Manager Retail Branch Server 4.1 postgresql14 14.3-150200.5.12.2 SUSE-SU-2022:1908-1
SUSE Manager Proxy 4.1 postgresql10 10.21-150100.8.47.1 SUSE-SU-2022:1890-1
SUSE Manager Proxy 4.1 postgresql12 12.11-150200.8.32.1 SUSE-SU-2022:1894-1
SUSE Manager Proxy 4.1 postgresql13 13.7-150200.5.28.1 SUSE-SU-2022:1895-1
SUSE Manager Proxy 4.1 postgresql14 14.3-150200.5.12.2 SUSE-SU-2022:1908-1
SUSE HPE Helion OpenStack 8 postgresql10 10.21-4.28.3 SUSE-SU-2022:1804-1
SUSE HPE Helion OpenStack 8 postgresql14 14.3-3.9.3 SUSE-SU-2022:1874-1
SUSE Enterprise Storage 7 postgresql10 10.21-150100.8.47.1 SUSE-SU-2022:1890-1
SUSE Enterprise Storage 7 postgresql12 12.11-150200.8.32.1 SUSE-SU-2022:1894-1
SUSE Enterprise Storage 7 postgresql13 13.7-150200.5.28.1 SUSE-SU-2022:1895-1
SUSE Enterprise Storage 7 postgresql14 14.3-150200.5.12.2 SUSE-SU-2022:1908-1
SUSE Enterprise Storage 6 postgresql 12.0.1-150000.8.19.1 SUSE-SU-2022:2893-1
SUSE Enterprise Storage 6 postgresql10 10.21-150100.8.47.1 SUSE-SU-2022:1890-1
SUSE Enterprise Storage 6 postgresql12 12.12-150100.3.33.1 SUSE-SU-2022:2958-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed postgresql10 10.19-2.7 openSUSE-SU-2024:12072-1
openSUSE Tumbleweed postgresql11 11.16-1.1 openSUSE-SU-2024:12075-1
openSUSE Tumbleweed postgresql12 12.11-1.1 openSUSE-SU-2024:12076-1
openSUSE Tumbleweed postgresql13 13.7-1.1 openSUSE-SU-2024:12077-1
openSUSE Tumbleweed postgresql14 14.2-1.3 openSUSE-SU-2024:12073-1
openSUSE Tumbleweed postgresql15 15.4-2.1 openSUSE-SU-2024:13243-1
openSUSE Tumbleweed postgresql16 16.4-1.1 openSUSE-SU-2024:14360-1
openSUSE Tumbleweed postgresql17 17.6-2.1 openSUSE-SU-2025:15580-1
openSUSE Leap 15.4 postgresql10 10.21-150100.8.47.1 SUSE-SU-2022:1890-1
openSUSE Leap 15.4 postgresql12 12.11-150200.8.32.1 SUSE-SU-2022:1894-1
openSUSE Leap 15.4 postgresql13 13.7-150200.5.28.1 SUSE-SU-2022:1895-1
openSUSE Leap 15.4 postgresql14 14.3-150200.5.12.2 SUSE-SU-2022:1908-1
openSUSE Leap 15.3 postgresql10 10.21-150100.8.47.1 SUSE-SU-2022:1890-1
openSUSE Leap 15.3 postgresql12 12.11-150200.8.32.1 SUSE-SU-2022:1894-1
openSUSE Leap 15.3 postgresql13 13.7-150200.5.28.1 SUSE-SU-2022:1895-1
openSUSE Leap 15.3 postgresql14 14.3-150200.5.12.2 SUSE-SU-2022:1908-1
ReleasePackageFixed inAdvisory
Alpine v3.20 postgresql14 +1 14.3-r0 —
Alpine v3.19 postgresql13 13.7-r0 —
Alpine v3.19 postgresql14 +1 14.3-r0 —
Alpine v3.18 postgresql12 12.11-r0 —
Alpine v3.18 postgresql13 13.7-r0 —
Alpine v3.18 postgresql14 +1 14.3-r0 —
Alpine v3.17 postgresql12 12.11-r0 —
Alpine v3.17 postgresql13 13.7-r0 —
Alpine v3.17 postgresql14 +1 14.3-r0 —
Alpine v3.16 postgresql12 12.11-r0 —
Alpine v3.16 postgresql13 13.7-r0 —
Alpine v3.16 postgresql14 14.3-r0 —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.15 postgresql12 12.11-r0 —
Alpine v3.15 postgresql13 13.7-r0 —
Alpine v3.15 postgresql14 14.3-r0 —
Alpine v3.14 postgresql 13.7-r0 —
Alpine v3.13 postgresql 13.7-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 postgresql +11 9.2.24-8.amzn2 ALAS2-2022-1843

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) postgresql 14.5-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 postgresql +10 13.7-1.el9_0 ELSA-2022-4771
Oracle Linux 8 pg_repack 1.4.6-3.module+el8.5.0+20333+86306fc7 ELSA-2022-4855, ELSA-2022-4807
Oracle Linux 8 pgaudit 1.4.0-5.module+el8.5.0+20333+86306fc7 ELSA-2022-4855, ELSA-2022-4807
Oracle Linux 8 postgres-decoderbufs 0.10.0-2.module+el8.4.0+20016+06fd4df3 ELSA-2022-4855, ELSA-2022-4807
Oracle Linux 8 postgresql +12 10.21-2.module+el8.6.0+20673+e7bc7ac8 ELSA-2022-4855, ELSA-2022-4807, ELSA-2022-4805
Oracle Linux 7 postgresql +11 9.2.24-8.el7_9 ELSA-2022-5162

Advisories 49

References