CVE-2021-42392 — Vulnetix

CVE-2021-42392 PUBLISHED

Es existiert eine Schwachstelle in H2 im Zusammenhang mit Java JNDI URLs. Ein entfernter authentisierter Angreifer kann diese Schwachstelle zur Ausführung von beliebigem Code ausnutzen.

EPSS 90.59% · 99.6th percentile

Risk Scores

EPSS Score

90.59%

99.6th percentile

Affected Products

Vendor	Product	Versions
Debian	Debian Linux
Ubuntu	Ubuntu Linux
Red Hat	Red Hat Enterprise Linux

Timeline

CVE Published
Jan 8, 2022 EPSS Score
Jan 10, 2022 EPSS Score
Jan 13, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Feb 15, 2022 EPSS Score
Apr 20, 2022 EPSS Score
Feb 25, 2023 EPSS Score
Apr 14, 2023 EPSS Score
May 8, 2023 EPSS Score
May 11, 2023 EPSS Score
Jul 8, 2023 EPSS Score

References

https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0098.json advisory
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0098 advisory
https://github.com/h2database/h2database/security/advisories/GHSA-h376-j262-vhq6 advisory
https://access.redhat.com/errata/RHSA-2022:4918 advisory
https://access.redhat.com/errata/RHSA-2022:4922 advisory
https://access.redhat.com/errata/RHSA-2022:4919 advisory
https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html advisory
https://lists.debian.org/debian-security-announce/2022/msg00043.html advisory
https://access.redhat.com/errata/RHSA-2022:1013 advisory
https://ubuntu.com/security/notices/USN-5365-1 advisory
https://access.redhat.com/errata/RHSA-2022:6787 advisory
https://access.redhat.com/errata/RHSA-2022:6782 advisory
https://access.redhat.com/errata/RHSA-2022:6783 advisory
https://access.redhat.com/errata/RHSA-2022:7417 advisory
https://access.redhat.com/errata/RHSA-2022:7409 advisory
https://access.redhat.com/errata/RHSA-2022:7410 advisory
https://access.redhat.com/errata/RHSA-2022:7411 advisory
https://www.google.com/url?q=https%3A%2F%2Fubuntu.com%2Fsecurity%2Fnotices%2FUSN-6834-1&%3Bsource=gmail&%3Bust=1718378370385000&%3Busg=AOvVaw0RVF_FMFfBi3o2pZ10vhWK advisory

Open in Interactive Console →