Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-u751-gq61-fbge
Vulnerability ID VCID-u751-gq61-fbge
Aliases CVE-2022-41862
Summary Client memory disclosure when connecting, with Kerberos, to modified servermore details
Status Published
Exploitability 0.5
Weighted Severity 3.8
Risk 1.9
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
System Score Found at
cvssv3 3.7 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41862.json
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
epss 0.0032 https://api.first.org/data/v1/epss?cve=CVE-2022-41862
cvssv3.1 3.7 https://bugzilla.redhat.com/show_bug.cgi?id=2165722
ssvc Track https://bugzilla.redhat.com/show_bug.cgi?id=2165722
cvssv3.1 7.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 3.7 https://security.netapp.com/advisory/ntap-20230427-0002/
ssvc Track https://security.netapp.com/advisory/ntap-20230427-0002/
cvssv3 3.7 https://www.postgresql.org/support/security/CVE-2022-41862/
cvssv3.1 3.7 https://www.postgresql.org/support/security/CVE-2022-41862/
ssvc Track https://www.postgresql.org/support/security/CVE-2022-41862/
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41862.json
https://api.first.org/data/v1/epss?cve=CVE-2022-41862
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41862
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://www.postgresql.org/about/news/postgresql-152-147-1310-1214-and-1119-released-2592/
https://www.postgresql.org/support/security/CVE-2022-41862/
2165722 https://bugzilla.redhat.com/show_bug.cgi?id=2165722
ntap-20230427-0002 https://security.netapp.com/advisory/ntap-20230427-0002/
RHSA-2023:1576 https://access.redhat.com/errata/RHSA-2023:1576
RHSA-2023:1693 https://access.redhat.com/errata/RHSA-2023:1693
RHSA-2023:4535 https://access.redhat.com/errata/RHSA-2023:4535
RHSA-2023:6429 https://access.redhat.com/errata/RHSA-2023:6429
RHSA-2023:7016 https://access.redhat.com/errata/RHSA-2023:7016
RHSA-2023:7545 https://access.redhat.com/errata/RHSA-2023:7545
RHSA-2023:7580 https://access.redhat.com/errata/RHSA-2023:7580
RHSA-2023:7666 https://access.redhat.com/errata/RHSA-2023:7666
RHSA-2023:7667 https://access.redhat.com/errata/RHSA-2023:7667
RHSA-2023:7694 https://access.redhat.com/errata/RHSA-2023:7694
RHSA-2023:7695 https://access.redhat.com/errata/RHSA-2023:7695
RHSA-2023:7772 https://access.redhat.com/errata/RHSA-2023:7772
USN-5906-1 https://usn.ubuntu.com/5906-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41862.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://bugzilla.redhat.com/show_bug.cgi?id=2165722
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T16:02:06Z/ Found at https://bugzilla.redhat.com/show_bug.cgi?id=2165722
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://security.netapp.com/advisory/ntap-20230427-0002/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T16:02:06Z/ Found at https://security.netapp.com/advisory/ntap-20230427-0002/
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://www.postgresql.org/support/security/CVE-2022-41862/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T16:02:06Z/ Found at https://www.postgresql.org/support/security/CVE-2022-41862/
Exploit Prediction Scoring System (EPSS)
Percentile 0.55056
EPSS Score 0.0032
Published At April 2, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T12:35:51.606487+00:00 PostgreSQL Importer Import https://www.postgresql.org/support/security/CVE-2022-41862 38.0.0