Lucene search
Veracode Vulnerability DatabaseVERACODE:37484HistoryOct 11, 2022 - 2:15 a.m.
Remote Code Execution
2022-10-1102:15:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
hypersql database
remote code execution
vulnerability
supportsjavamethod function
hsqldatabaseproperties.java
untrusted input process
attacker
system
EPSS
0.013
Percentile
85.7%
HyperSQL Database is vulnerable to remote code execution. The vulnerability exists in the supportsJavaMethod function of HsqlDatabaseProperties.java due to the untrusted input process allowing an attacker to execute remote codes in the system.
References
hsqldb.org/doc/2.0/guide/sqlroutines-chapt.html#src_jrt_access_control
bugs.chromium.org/p/oss-fuzz/issues/detail?id=50212#c7
github.com/advisories/GHSA-77xx-rxvh-q682
github.com/ryenus/hsqldb/commit/b6719c67b41eb9298c2451ad2829bf03b262a941
lists.debian.org/debian-lts-announce/2022/12/msg00020.html
sourceforge.net/p/hsqldb/svn/6614/tree//base/trunk/src/org/hsqldb/persist/HsqlDatabaseProperties.java
www.debian.org/security/2023/dsa-5313
Related
nessus
nessus
Oracle Linux 6 : hsqldb (ELSA-2023-12103)
2023-02-08 00:00:00
RHEL 6 : hsqldb (RHSA-2022:8559)
2022-11-21 00:00:00
SUSE SLES12 Security Update : hsqldb (SUSE-SU-2022:3864-1)
2022-11-04 00:00:00
cnvd
cnvd
HSQLDB Code Execution Vulnerability
2022-10-10 00:00:00
osv
osv
hsqldb - security update
2023-01-10 00:00:00
HyperSQL DataBase vulnerable to remote code execution when processing untrusted input
2022-10-06 18:52:05
hsqldb - security update
2022-12-10 00:00:00
ubuntucve
ubuntucve
CVE-2022-41853
2022-10-06 00:00:00
debiancve
debiancve
CVE-2022-41853
2022-10-06 18:17:07
prion
prion
Design/Logic Flaw
2022-10-06 18:17:00
redhatcve
redhatcve
CVE-2022-41853
2022-10-19 12:47:35
cve
cve
CVE-2022-41853
2022-10-06 18:17:07
openvas
openvas
CentOS: Security Advisory for hsqldb (CESA-2022:8560)
2022-12-01 00:00:00
Debian: Security Advisory (DSA-5313-1)
2023-01-12 00:00:00
Debian: Security Advisory (DLA-3234-1)
2022-12-11 00:00:00
debian
debian
[SECURITY] [DSA 5313-1] hsqldb security update
2023-01-10 23:15:17
[SECURITY] [DLA 3234-1] hsqldb security update
2022-12-10 16:18:30
redhat
redhat
(RHSA-2022:8560) Important: hsqldb security update
2022-11-21 16:04:34
(RHSA-2022:8559) Important: hsqldb security update
2022-11-21 15:56:20
oraclelinux
oraclelinux
hsqldb security update
2022-11-22 00:00:00
hsqldb security update
2023-02-09 00:00:00
suse
suse
Security update for hsqldb (important)
2022-11-01 00:00:00
ibm
ibm
cvelist
cvelist
CVE-2022-41853 Remote code execution in HyperSQL DataBase
2022-10-06 17:14:43
centos
centos
hsqldb security update
2022-11-30 23:02:46
amazon
amazon
Important: hsqldb
2023-01-18 20:56:00
Important: hsqldb
2023-01-18 00:17:00
nvd
nvd
CVE-2022-41853
2022-10-06 18:17:07
github
github
veracode
veracode
Remote Code Execution
2022-10-11 09:00:01
qualysblog
qualysblog
Oracle Patch Tuesday, July 2023 Security Update Review
2023-07-19 15:56:06
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00