Medium USN-8735-1 1 CVE

hsqldb1.8.0 vulnerability

Published Sep 8, 2026 · Updated Sep 8, 2026

Ecosystem: Ubuntu

Summary

It was discovered that HSQLDB incorrectly handled specially crafted
database files. An attacker could possibly use this issue to overwrite
arbitrary files.

Fixed packages 4

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	hsqldb1.8.0	1.8.0.10+dfsg-11+deb12u1build0.22.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	hsqldb1.8.0	1.8.0.10+dfsg-6ubuntu0.16.04.1~esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	hsqldb1.8.0	1.8.0.10+dfsg-10~18.04ubuntu0.18.04.1~esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS	hsqldb1.8.0	1.8.0.10+dfsg-10ubuntu0.20.04.1~esm1

Vulnerabilities 1

Medium 5.0

CVE-2023-1183 EPSS 65%

Arbitrary file write

A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.

Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu

Jul 10, 2023

References

report
https://ubuntu.com/security/CVE-2023-1183