Description
A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/db.c. The manipulation of the argument value/name leads to sql injection. The name of the patch is 7a7d737a3929f335b9717ddbd31db91151b69ad2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215252.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TicklishHoneyBee | nodau | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nodau | 0.3.8-5 | — |
| Debian 13 | nodau | 0.3.8-5 | — |
| Debian 12 | nodau | 0.3.8-5 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | nodau | No fix yet | — |
| Ubuntu 20.04 LTS | nodau | No fix yet | — |
| Ubuntu 18.04 LTS | nodau | No fix yet | — |
| Ubuntu 16.04 LTS | nodau | No fix yet | — |