CVE-2022-2625
Last modified
CVE-2022-2625 is a high-severity vulnerability rated 8/10 on the CVSS scale. A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. EPSS estimates a 1.52% chance of exploitation in the next 30 days.
Description
A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Postgresql | Postgresql | >= 10.0, < 10.22 | — |
| Postgresql | Postgresql | >= 11.0, < 11.17 | — |
| Postgresql | Postgresql | >= 12.0, < 12.12 | — |
| Postgresql | Postgresql | >= 13.0, < 13.8 | — |
| Postgresql | Postgresql | >= 14.0, < 14.5 | — |
| Postgresql | Postgresql | 15 | Beta1 |
| Fedoraproject | Fedora | 36 | — |
| Redhat | Enterprise Linux | 6.0 | — |
| Redhat | Enterprise Linux | 7.0 | — |
| Redhat | Enterprise Linux | 8.0 | — |
| Redhat | Enterprise Linux | 9.0 | — |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2113825Issue Tracking, Third Party Advisory
- https://security.gentoo.org/glsa/202211-04Third Party Advisory
- https://www.postgresql.org/about/news/postgresql-145-138-1212-1117-1022-and-15-beta-3-released-2496/Release Notes, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2113825Issue Tracking, Third Party Advisory
- https://security.gentoo.org/glsa/202211-04Third Party Advisory
- https://www.postgresql.org/about/news/postgresql-145-138-1212-1117-1022-and-15-beta-3-released-2496/Release Notes, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-2625?
How severe is CVE-2022-2625?
How do I fix CVE-2022-2625?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-26243Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a …7.5
- CVE-2022-26244A stored cross-site scripting (XSS) vulnerability in Hospita…5.4
- CVE-2022-26245Falcon-plus v0.3 was discovered to contain a SQL injection v…9.8
- CVE-2022-26246TMS v2.28.0 was discovered to contain a cross-site scripting…6.1
- CVE-2022-26247TMS v2.28.0 contains an insecure permissions vulnerability v…5.9
- CVE-2022-26249Survey King v0.3.0 does not filter data properly when export…9.8
- CVE-2022-26250Synaman v5.1 and below was discovered to contain weak file p…7.8
- CVE-2022-26251The HTTP interface of Synaman v5.1 and below was discovered …7.2
- CVE-2022-26252aaPanel v6.8.21 was discovered to be vulnerable to directory…6.5
- CVE-2022-26254WoWonder The Ultimate PHP Social Network Platform v4.0.0 was…5.3
- CVE-2022-26255Clash for Windows v0.19.8 was discovered to allow arbitrary …9.8
- CVE-2022-26258D-Link DIR-820L 1.05B03 was discovered to contain remote com…9.8
Are you affected by CVE-2022-2625?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST