Skip to content
OpenAdvisories
High RHSA-2022:8559 1 CVE

Red Hat Security Advisory: hsqldb security update

Published Sep 27, 2024 · Updated Oct 2, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 6 ELS rhel_els:6 hsqldb 1:1.8.0.10-13.el6_10
Red Hat · RHEL 6 ELS rhel_els:6 hsqldb-demo 1:1.8.0.10-13.el6_10
Red Hat · RHEL 6 ELS rhel_els:6 hsqldb-javadoc 1:1.8.0.10-13.el6_10
Red Hat · RHEL 6 ELS rhel_els:6 hsqldb-manual 1:1.8.0.10-13.el6_10

Vulnerabilities 1

  • High 8.0
    CVE-2022-41853 Public exploit

    Remote code execution in HyperSQL DataBase

    Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath re…

    HyperSQL DataBase hsqldb hsqldb hsqldb Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2136141
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8559.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-41853
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-41853
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-41853
  • article
    http://hsqldb.org/doc/2.0/guide/sqlroutines-chapt.html#src_jrt_access_control
  • advisory
    https://github.com/advisories/GHSA-77xx-rxvh-q682