https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:44:23 +0000 https://vulnerability.circl.lu/vuln/cve-2022-41862 <p><strong>Affected:</strong> postgresql</p> <p>In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.</p> <p><strong>Affected:</strong> postgresql</p> <p>In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.</p> https://vulnerability.circl.lu/vuln/cve-2022-41862 https://vulnerability.circl.lu/vuln/usn-5906-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14</p> <p>Jacob Champion discovered that the PostgreSQL client incorrectly handled Kerberos authentication. If a user or automated system were tricked into connecting to a malicious server, a remote attacker could possibly use this issue to obtain sensitive information.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14</p> <p>Jacob Champion discovered that the PostgreSQL client incorrectly handled Kerberos authentication. If a user or automated system were tricked into connecting to a malicious server, a remote attacker could possibly use this issue to obtain sensitive information.</p> https://vulnerability.circl.lu/vuln/usn-5906-1