Not rated
CVE-2022-1552 A flaw was found in PostgreSQL
Description
A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| postgresql | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- www.postgresql.org www.postgresql.org
- www.postgresql.org www.postgresql.org
- access.redhat.com access.redhat.com
- security.netapp.com security.netapp.com
- GLSA-202211-04 security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of postgresql
The 79 CVEs of postgresql →
CVE-2026-6471
Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen…
7.2
High
CVE-2026-14671
Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating…
8.8
High
CVE-2026-6470
Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and…
4.3
Medium
CVE-2026-6464
Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as…
8.1
High