Skip to content
Fencer Vulns
high 8.8

CVE-2022-1552 in the critical feed json

A flaw was found in PostgreSQL.

published 2022-08-31 4 y ago modified 2026-09-08 2 mo ago also BIT-postgresql-2022-1552 , EUVD-2022-24847 , JLSEC-2026-37

cvss
8.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
17.0%
EPSS 17.0% chance of exploitation in 30 days, percentile 97%
public exploits
0
none known

Summary

A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.

Patch / fix

  • bitnami postgresql 10.21.0, 11.16.0, 12.11.0, 13.7.0, 14.3.0
  • julia LibPQ_jll 14.3.0+0
  • postgresql postgresql 10.21, 11.16, 12.11, 13.7, 14.3
  • postgresql-13 Debian 11 13.7-0+deb11u1

debian advisories DEBIAN-CVE-2022-1552

  • postgresql-10 Ubuntu 18.04 LTS 10.21-0ubuntu0.18.04.1
  • postgresql-12 Ubuntu 20.04 LTS 12.11-0ubuntu0.20.04.1
  • postgresql-14 Ubuntu 22.04 LTS 14.3-0ubuntu0.22.04.1
  • postgresql-9.5 Ubuntu Pro 16.04 LTS 9.5.25-0ubuntu0.16.04.1+esm2

ubuntu advisories UBUNTU-CVE-2022-1552

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • pgaudit RHEL 8, RHEL 8.4 EUS 1.5.0-1.module+el8.4.0+8873+b821c30a
  • pg_repack RHEL 8 1.4.6-3.module+el8.5.0+11357+bcc62552
  • postgresql RHEL 8 13.7-2.module+el8.6.0+15347+b8eabcef
  • postgresql-test RHEL 8 13.7-2.module+el8.6.0+15347+b8eabcef
  • postgresql-pltcl RHEL 8 13.7-2.module+el8.6.0+15347+b8eabcef
  • postgresql-plperl RHEL 8 13.7-2.module+el8.6.0+15347+b8eabcef
  • postgresql-server RHEL 8 13.7-2.module+el8.6.0+15347+b8eabcef
  • postgresql-contrib RHEL 8 13.7-2.module+el8.6.0+15347+b8eabcef

red hat advisories RHSA-2022:4855RHSA-2022:4856RHSA-2022:4854RHSA-2022:4893RHSA-2022:4895RHSA-2022:4807

  • postgresql12 SLES for SAP 15 SP1, SLES 15 SP1-LTSS, SLES 15 SP1-BCL +3 more 12.12-150100.3.33.1
  • postgresql10 SLES for SAP 15, SLES 15-LTSS, SLE High Performance Computing 15-LTSS +1 more 10.22-150000.4.42.1
  • postgresql SLES for SAP 15 SP1, SLES for SAP 15, SLES 15-LTSS +7 more 12.0.1-150000.8.19.1
  • postgresql14 SLES for SAP 15 SP2, SLES 15 SP2-LTSS, SLES 15 SP2-BCL +13 more 14.3-150200.5.12.2
  • postgresql13 SLES for SAP 15 SP2, SLES 15 SP2-LTSS, SLES 15 SP2-BCL +12 more 13.7-150200.5.28.1
  • postgresql12 SLES for SAP 15 SP2, SLES 15 SP2-LTSS, SLES 15 SP2-BCL +10 more 12.11-150200.8.32.1
  • postgresql10 SLES for SAP 15 SP2, SLES for SAP 15 SP1, SLES 15 SP2-LTSS +15 more 10.21-150100.8.47.1
  • postgresql14 SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES for SAP 12 SP3 +11 more 14.3-3.9.3

suse advisories SUSE-SU-2022:2958-1SUSE-SU-2022:2893-1SUSE-SU-2022:1908-1SUSE-SU-2022:1895-1SUSE-SU-2022:1894-1SUSE-SU-2022:1890-1

  • postgresql17 openSUSE Tumbleweed 17.6-2.1
  • postgresql16 openSUSE Tumbleweed 16.4-1.1
  • postgresql10 openSUSE Tumbleweed 10.19-2.7
  • postgresql14 openSUSE Tumbleweed 14.2-1.3
  • postgresql11 openSUSE Tumbleweed 11.16-1.1
  • postgresql12 openSUSE Tumbleweed 12.11-1.1
  • postgresql13 openSUSE Tumbleweed 13.7-1.1
  • postgresql15 openSUSE Tumbleweed 15.4-2.1

opensuse advisories openSUSE-SU-2025:15580-1openSUSE-SU-2024:14360-1openSUSE-SU-2024:12072-1openSUSE-SU-2024:12073-1openSUSE-SU-2024:12075-1openSUSE-SU-2024:12076-1

  • pgaudit AlmaLinux 8 1.4.0-5.module_el8.6.0+2758+4f4474df
  • pg_repack AlmaLinux 8 1.4.6-3.module_el8.6.0+2758+4f4474df
  • pg_repack AlmaLinux 8 1.4.6-3.module_el8.6.0+2760+1746ec94
  • postgresql AlmaLinux 8 12.11-2.module_el8.6.0+2905+eb237fb8
  • postgresql-test AlmaLinux 8 12.11-2.module_el8.6.0+2905+eb237fb8
  • postgresql-pltcl AlmaLinux 8 12.11-2.module_el8.6.0+2905+eb237fb8
  • postgresql-plperl AlmaLinux 8 12.11-2.module_el8.6.0+2905+eb237fb8
  • postgresql-server AlmaLinux 8 12.11-2.module_el8.6.0+2905+eb237fb8

almalinux advisories ALSA-2022:4807ALSA-2022:4805

  • pgaudit Rocky Linux 8 1.5.0-1.module+el8.5.0+684+c3892ef9
  • pgaudit Rocky Linux 8 1.5.0-1.module+el8.4.0+546+3620623e
  • pg_repack Rocky Linux 8 1.4.6-3.module+el8.5.0+684+c3892ef9
  • postgresql Rocky Linux 8 13.7-2.module+el8.6.0+980+9caa008a
  • postgres-decoderbufs Rocky Linux 8 0.10.0-2.module+el8.5.0+684+c3892ef9
  • postgres-decoderbufs Rocky Linux 8 0.10.0-2.module+el8.4.0+424+71d47d9a
  • pgaudit Rocky Linux 8 1.4.0-5.module+el8.5.0+686+20453ecc
  • postgresql Rocky Linux 8 12.11-2.module+el8.6.0+979+b6ef1a3a

rocky linux advisories RLSA-2022:4855RLSA-2022:4807RLSA-2022:4805RLSA-2022:4771

  • postgresql Alpine 3.14, Alpine 3.13 13.7-r0
  • postgresql12 Alpine 3.18, Alpine 3.17, Alpine 3.16 +1 more 12.11-r0
  • postgresql13 Alpine 3.19, Alpine 3.18, Alpine 3.17 +2 more 13.7-r0
  • postgresql14 Alpine 3.20, Alpine 3.19, Alpine 3.18 +3 more 14.3-r0
  • postgresql15 Alpine 3.20, Alpine 3.19, Alpine 3.18 +1 more 14.3-r0

alpine advisories ALPINE-CVE-2022-1552

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • postgresql CBL-Mariner 2.0 14.5-1

azure linux advisories AZL-10826

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

  • postgresql Arch Linux 14.3-1

arch linux advisories AVG-2719

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2022-1552 updated cvss 8.8

postgresql: Autovacuum, REINDEX, and others omit "security restricted operation" sandbox

  • Red Hat Enterprise Linux 6 postgresql, postgresql-libs, postgresql-test, postgresql-pltcl, postgresql-plperl, postgresql-server, +2 more
    affected: workaround, no fix planned “Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.”
  • Red Hat CodeReady Linux Builder (v. 9) postgresql-test 13.7-1.el9_0
    fixed: vendor fix “Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.” RHSA-2022:4771
  • Red Hat Enterprise Linux AppStream (v. 8) pgaudit 1.5.0-1.module+el8.4.0+8873+b821c30a, pgaudit 1.4.0-5.module+el8.5.0+11354+78b3c9c5, pg_repack 1.4.6-3.module+el8.5.0+11354+78b3c9c5, pg_repack 1.4.6-3.module+el8.5.0+11357+bcc62552, postgresql 13.7-2.module+el8.6.0+15347+b8eabcef, postgresql 10.21-2.module+el8.6.0+15342+53518fac, +27 more
    fixed: vendor fix “Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.” RHSA-2022:4807
  • Red Hat Enterprise Linux AppStream (v. 9) postgresql 13.7-1.el9_0, postgresql-pltcl 13.7-1.el9_0, postgresql-plperl 13.7-1.el9_0, postgresql-server 13.7-1.el9_0, postgresql-contrib 13.7-1.el9_0, postgresql-upgrade 13.7-1.el9_0, +2 more
    fixed: vendor fix “Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.” RHSA-2022:4771
  • Red Hat Enterprise Linux AppStream E4S (v. 8.1) postgresql 10.21-2.module+el8.1.0+15339+34e1e10d, postgresql-test 10.21-2.module+el8.1.0+15339+34e1e10d, postgresql-pltcl 10.21-2.module+el8.1.0+15339+34e1e10d, postgresql-plperl 10.21-2.module+el8.1.0+15339+34e1e10d, postgresql-server 10.21-2.module+el8.1.0+15339+34e1e10d, postgresql-contrib 10.21-2.module+el8.1.0+15339+34e1e10d, +3 more
    fixed: vendor fix “Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.” RHSA-2022:4894
  • Red Hat Enterprise Linux AppStream EUS (v. 8.2) pgaudit 1.4.0-4.module+el8.2.0+9043+1dbb5661, postgresql 10.21-2.module+el8.2.0+15340+c4468608, postgresql 12.11-2.module+el8.2.0+15343+06a38260, postgresql-test 10.21-2.module+el8.2.0+15340+c4468608, postgresql-test 12.11-2.module+el8.2.0+15343+06a38260, postgresql-pltcl 10.21-2.module+el8.2.0+15340+c4468608, +14 more
    fixed: vendor fix “Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.” RHSA-2022:4893
  • Red Hat Enterprise Linux AppStream EUS (v.8.4) pgaudit 1.5.0-1.module+el8.4.0+8873+b821c30a, pgaudit 1.4.0-6.module+el8.4.0+11288+c193d6d7, postgresql 13.7-2.module+el8.4.0+15346+22c653ca, postgresql 10.21-2.module+el8.4.0+15341+25c9f2fe, postgresql 12.11-2.module+el8.4.0+15406+aeb4ae67, postgresql-test 13.7-2.module+el8.4.0+15346+22c653ca, +25 more
    fixed: vendor fix “Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.” RHSA-2022:4856
  • Red Hat Enterprise Linux Client (v. 7) postgresql 9.2.24-8.el7_9, postgresql-libs 9.2.24-8.el7_9 Red Hat Enterprise Linux Client Optional (v. 7) postgresql 9.2.24-8.el7_9, postgresql-test 9.2.24-8.el7_9, postgresql-pltcl 9.2.24-8.el7_9, postgresql-plperl 9.2.24-8.el7_9, postgresql-server 9.2.24-8.el7_9, postgresql-contrib 9.2.24-8.el7_9, +2 more Red Hat Enterprise Linux ComputeNode Optional (v. 7) postgresql 9.2.24-8.el7_9, postgresql-test 9.2.24-8.el7_9, postgresql-pltcl 9.2.24-8.el7_9, postgresql-plperl 9.2.24-8.el7_9, postgresql-server 9.2.24-8.el7_9, postgresql-contrib 9.2.24-8.el7_9, +2 more Red Hat Enterprise Linux Server (v. 7) postgresql 9.2.24-8.el7_9, postgresql-libs 9.2.24-8.el7_9, postgresql-test 9.2.24-8.el7_9, postgresql-pltcl 9.2.24-8.el7_9, postgresql-plperl 9.2.24-8.el7_9, postgresql-server 9.2.24-8.el7_9, +2 more Red Hat Enterprise Linux Server Optional (v. 7) postgresql-upgrade 9.2.24-8.el7_9 Red Hat Enterprise Linux Workstation (v. 7) postgresql 9.2.24-8.el7_9, postgresql-libs 9.2.24-8.el7_9, postgresql-test 9.2.24-8.el7_9, postgresql-pltcl 9.2.24-8.el7_9, postgresql-plperl 9.2.24-8.el7_9, postgresql-server 9.2.24-8.el7_9, +2 more
    +1 more products
    Red Hat Enterprise Linux Workstation Optional (v. 7) postgresql-upgrade 9.2.24-8.el7_9
    fixed: vendor fix “Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.” RHSA-2022:5162
show 2 more
  • Red Hat Software Collections for RHEL Workstation(v. 7) rh-postgresql13-postgresql 13.7-1.el7, rh-postgresql10-postgresql 10.21-1.el7, rh-postgresql12-postgresql 12.11-1.el7, rh-postgresql13-postgresql-libs 13.7-1.el7, rh-postgresql13-postgresql-test 13.7-1.el7, rh-postgresql10-postgresql-libs 10.21-1.el7, +28 more Red Hat Software Collections for RHEL(v. 7) rh-postgresql13-postgresql 13.7-1.el7, rh-postgresql10-postgresql 10.21-1.el7, rh-postgresql12-postgresql 12.11-1.el7, rh-postgresql13-postgresql-libs 13.7-1.el7, rh-postgresql13-postgresql-test 13.7-1.el7, rh-postgresql10-postgresql-libs 10.21-1.el7, +28 more
    fixed: vendor fix “Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.” RHSA-2022:4913
  • Red Hat build of Quarkus postgresql Red Hat Decision Manager 7 postgresql Red Hat Enterprise Linux 8 libpq Red Hat Fuse 7 postgresql Red Hat JBoss Enterprise Application Platform 6 postgresql Red Hat JBoss Enterprise Application Platform 7 postgresql
    +1 more products
    Red Hat Process Automation 7 postgresql
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

16.98% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
OSV 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected packages

ecosystem package affected fixed in
bitnami postgresql
>=10.0.0, <10.21.0
>=11.0.0, <11.16.0
>=12.0.0, <12.11.0
>=13.0.0, <13.7.0
>=14.0.0, <14.3.0
10.21.0
11.16.0
12.11.0
13.7.0
14.3.0
julia LibPQ_jll
<14.3.0+0
14.3.0+0

Affected products

  • n/a postgresql

Classification

Weakness
  • CWE-459 Incomplete Cleanup
  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.