CVE-2022-1552
Reported by redhat · Published August 31, 2022
A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| postgresql-docs | Amazon Linux | 9.2.24-8.amzn2 |
| postgresql15 | Alpine | 14.3-r0 |
| postgresql-devel | Amazon Linux | 9.2.24-8.amzn2 |
| postgresql13 | Alpine | 13.7-r0 |
| postgresql-pltcl | Amazon Linux | 9.2.24-8.amzn2 |
| postgresql-libs | Amazon Linux | 9.2.24-8.amzn2 |
| postgresql-plperl | Amazon Linux | 9.2.24-8.amzn2 |
| postgresql-server | Amazon Linux | 9.2.24-8.amzn2 |
| postgresql-plpython | Amazon Linux | 9.2.24-8.amzn2 |
| postgresql-static | Amazon Linux | 9.2.24-8.amzn2 |
| postgresql | Bitnami | 14.3.0, 13.7.0, 12.11.0, 11.16.0, 10.21.0 |
| postgresql-contrib | Amazon Linux | 9.2.24-8.amzn2 |
4 more packages have a fixed version. See every fix in Lookup.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| n/a | postgresql | Fixed in postgresql 14.3, postgresql 13.7, postgresql 12.11, postgresql 11.16, postgresql 10.21. |
| amazon:2 | postgresql-docs | 0 |
| alpine | postgresql15 | 0 |
| amazon:2 | postgresql-devel | 0 |
| alpine | postgresql13 | 0 |
| amazon:2 | postgresql-pltcl | 0 |
| amazon:2 | postgresql-libs | 0 |
| amazon:2 | postgresql-plperl | 0 |
| amazon:2 | postgresql-server | 0 |
| amazon:2 | postgresql-plpython | 0 |
| amazon:2 | postgresql-static | 0 |
| amazon:2 | postgresql-contrib | 0 |
| alpine | postgresql14 | 0 |
| amazon:2 | postgresql | 0 |
| n/a | postgresql | Fixed in postgresql 14.3, postgresql 13.7, postgresql 12.11, postgresql 11.16, postgresql 10.21. |
| alpine | postgresql12 | 0 |
| alpine | postgresql | 0 |
| amazon:2 | postgresql-test | 0 |
| amazon:2 | postgresql-upgrade | 0 |
| arch | postgresql | 0 |
Timeline
- May 12, 2022 CVE Published
- Sep 1, 2022 EPSS Score (30 in total, the first dated here)
- Apr 3, 2025 PoC Published
- Mar 10, 2026 Security Advisory (22 in total, the first dated here)
- Mar 17, 2026 Distribution Patch (16 in total, the first dated here)
- Jul 11, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2022-1552
vulnetix vdb fixes CVE-2022-1552Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-1552/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- GLSA-202211-04 vendor-advisory