Red Hat Security Advisory

RHSA-2023:6429

libpq security update

Released 2023-11-07 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) libpq-13.11-1.el9, libpq-devel-13.11-1.el9

TI-2022-20211 CVE-2022-41862 · GHSA-fr68-cm8v-7vv6

LOW 19

In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00622 Published 2023-03-03 Partial fix CWE-200