Kaspersky Threats

Solutions for:

Kaspersky ID:

KLA12537

Detect Date:

05/12/2022

Updated:

01/25/2024

Description

Escalation of privilege vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability to execute arbitrary code, gain privileges.

Original advisories

PostgreSQL News

CVE list

CVE-2022-1552
critical

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!

Kaspersky ID:

KLA12537

Detect Date:

05/12/2022

Updated:

01/25/2024

Severity

high

Solution

Update to the latest version
Download PostgreSQL

Impacts

ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected products

PostgreSQL 14.x earlier than 14.3
PostgreSQL 13.x earlier than 13.7
PostgreSQL 12.x earlier than 12.11
PostgreSQL 11.x earlier than 11.16
PostgreSQL 10.x earlier than 10.21

Kaspersky Next

Let’s go Next: redefine your business’s cybersecurity

Learn more

New Kaspersky!

Your digital life deserves complete protection!

Learn more

Confirm changes?

Your message has been sent successfully.

PE vulnerability in PostgreSQL

Description

Original advisories

Related products

CVE list

Read more