Lucene search
Veracode Vulnerability DatabaseVERACODE:33988HistoryFeb 03, 2022 - 8:33 a.m.
Remote Code Execution (RCE)
2022-02-0308:33:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
55
remote code execution
postgresql
vulnerability
implementation
attacker
EPSS
0.02
Percentile
89.1%
postgresql is vulnerable to remote code execution. The vulnerability exists due to a lack of santization of the implementation of the expected interface of the class before instantiating it which allows an attacker to execute remote code.
References
github.com/pgjdbc/pgjdbc/commit/f4d0ed69c0b3aae8531d83d6af4c57f22312c813
github.com/pgjdbc/pgjdbc/security/advisories/GHSA-v7wg-cpwc-24m4
lists.debian.org/debian-lts-announce/2022/05/msg00027.html
lists.fedoraproject.org/archives/list/[email protected]/message/BVEO7BEFXPBVHSPYL3YKQWZI6DYXQLFS/
security.netapp.com/advisory/ntap-20220311-0005/
www.debian.org/security/2022/dsa-5196
Related
osv
osv
libpgjava - security update
2022-05-20 00:00:00
pgjdbc Does Not Check Class Instantiation when providing Plugin Classes
2022-02-02 00:04:20
CGA-hwwj-wh5j-p2rj
2024-07-15 22:00:22
f5
f5
K69124112 : PostgreSQL JDBC vulnerability CVE-2022-21724
2022-04-29 00:00:00
nessus
nessus
EulerOS 2.0 SP8 : postgresql-jdbc (EulerOS-SA-2022-1946)
2022-06-22 00:00:00
Debian DLA-3018-1 : libpgjava - LTS security update
2022-05-23 00:00:00
RHEL 6 : jdbc-postgresql (Unpatched Vulnerability)
2024-05-11 00:00:00
redos
redos
ROS-20240806-21
2024-08-06 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3018-1)
2022-05-21 00:00:00
Huawei EulerOS: Security Advisory for postgresql-jdbc (EulerOS-SA-2022-1946)
2022-06-22 00:00:00
Fedora: Security Advisory for postgresql-jdbc (FEDORA-2022-1151f65e9a)
2022-04-15 00:00:00
redhatcve
redhatcve
CVE-2022-21724
2022-02-04 20:10:26
alpinelinux
alpinelinux
CVE-2022-21724
2022-02-02 12:15:08
ibm
ibm
Security Bulletin: A vulnerability in PostgreSQL JDBC Driver (PgJDBC) affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2022-21724)
2023-01-12 21:59:00
github
github
pgjdbc Does Not Check Class Instantiation when providing Plugin Classes
2022-02-02 00:04:20
nvd
nvd
CVE-2022-21724
2022-02-02 12:15:08
cve
cve
CVE-2022-21724
2022-02-02 12:15:08
fedora
fedora
[SECURITY] Fedora 35 Update: postgresql-jdbc-42.2.25-1.fc35
2022-04-14 16:07:47
ubuntucve
ubuntucve
CVE-2022-21724
2022-02-02 00:00:00
debian
debian
[SECURITY] [DLA 3018-1] libpgjava security update
2022-05-20 20:43:57
[SECURITY] [DSA 5196-1] libpgjava security update
2022-07-31 11:22:59
debiancve
debiancve
CVE-2022-21724
2022-02-02 12:15:08
prion
prion
Design/Logic Flaw
2022-02-02 12:15:00
cgr
cgr
CVE-2022-21724 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2022-21724 Unchecked Class Instantiation when providing Plugin Classes
2022-02-02 11:48:52
atlassian
atlassian
Vulnerable version of PostgresSQL JDBC driver used - CVE-2022-21724
2022-04-20 20:14:01
wolfi
wolfi
CVE-2022-21724 vulnerabilities
2024-10-01 21:13:23
redhat
redhat