VDB
BDU%3A2022-02030
BDU%3A2022-02030
PUBLISHED
CVSS 10 CRITICAL
Уязвимость системы управления базами данных H2 , связанная с неверным управлением генерацией кода, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Red Hat Inc., Canonical Ltd. | Debian GNU/Linux, OpenShift Container Platform, Jboss Fuse, JBoss Enterprise Application Platform, Red Hat Single Sign-On, Red Hat BPM Suite, Ubuntu, H2 |
Timeline
- Apr 8, 2022 CVE Published
- Mar 19, 2026 Distribution Patch
References
- https://github.com/h2database/h2database/security/advisories url
- https://github.com/h2database/h2database/releases/tag/version-2.1.210 url
- https://twitter.com/d0nkey_man/status/1483824727936450564 url
- http://seclists.org/fulldisclosure/2022/Jan/39 url
- http://packetstormsecurity.com/files/165676/H2-Database-Console-Remote-Code-Execution.html url
- https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html url
- https://www.debian.org/security/2022/dsa-5076 url
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-23221.xml advisory
- https://ubuntu.com/security/CVE-2022-23221 advisory
- https://security-tracker.debian.org/tracker/CVE-2022-23221 advisory