Skip to content
OpenAdvisories
High ELSA-2022-8560 1 CVE

Important: hsqldb security update (Oracle Linux 7)

Published Nov 22, 2022 · Updated Nov 22, 2022

Ecosystem: Oracle Linux

Summary

[1:1.8.1.3-15]
- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-41853

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 hsqldb 1:1.8.1.3-15.el7_9
Oracle Linux · 7 hsqldb-demo 1:1.8.1.3-15.el7_9
Oracle Linux · 7 hsqldb-javadoc 1:1.8.1.3-15.el7_9
Oracle Linux · 7 hsqldb-manual 1:1.8.1.3-15.el7_9

Vulnerabilities 1

  • High 8.0
    CVE-2022-41853 Public exploit

    Remote code execution in HyperSQL DataBase

    Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath re…

    HyperSQL DataBase hsqldb hsqldb hsqldb Debian Ubuntu Maven