CVE-2022-41862

Name of the Vulnerable Software and Affected Versions PostgreSQL (affected versions not specified)

Description The issue is related to information disclosure in PostgreSQL. It occurs when a modified, unauthenticated server sends an unterminated string during the establishment of Kerberos transport encryption, potentially causing a libpq client to over-read and report an error message containing uninitialized bytes. This could allow a remote attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.