Red Hat Security AdvisoryRHSA-2022:8559
hsqldb security update
Released 2022-11-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6 ELS) hsqldb-1:1.8.0.10-13.el6_10
- Red Hat Enterprise Linux Server Optional (v. 6 ELS) hsqldb-1:1.8.0.10-13.el6_10, hsqldb-demo-1:1.8.0.10-13.el6_10, hsqldb-javadoc-1:1.8.0.10-13.el6_10 +1
Fixes 1 record
Priority MEDIUM 51
Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05145 · Published 2022-10-06 · Partial fix · 2.7.1 CWE-470