[SECURITY] [DLA 2923-1] h2database security update

🗓️ 15 Feb 2022 00:06:01Reported by DebianType

debian

debian🔗 lists.debian.org👁 41 Views

h2database security update CVE-2021-42392 CVE-2022-23221 remote code execution vulnerabilities foun

Reporter	Title	Published	Views	Family All 129
0day.today	H2 Database Console Remote Code Execution Exploit	25 Jan 202200:00	–	zdt
GithubExploit	h2database-rce-poc	29 Apr 202612:58	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in H2Database H2	9 Jan 202216:23	–	githubexploit
ATTACKERKB	CVE-2021-42392	10 Jan 202214:10	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in h2database	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux – Vulnerability in h2database	20 May 202605:53	–	astralinux
IBM Security Bulletins	Security Bulletin: Vulnerability in Hibernate Validator affects IBM watsonx.data	18 Sep 202416:52	–	ibm
BDU FSTEC	The vulnerability of the `org.h2.util.JdbcUtils.getConnection` method in the H2 database management system allows a hacker to execute arbitrary code.	17 Jan 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the H2 database management system, related to improper code generation, allows a hacker to execute arbitrary code.	8 Apr 202200:00	–	bdu_fstec
Circl	CVE-2021-42392	7 Jan 202210:33	–	circl

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	9	all	libh2-java	1.4.193-1+deb9u1	libh2-java_1.4.193-1+deb9u1_all.deb
Debian	9	all	libh2-java-doc	1.4.193-1+deb9u1	libh2-java-doc_1.4.193-1+deb9u1_all.deb

15 Feb 2022 00:06Current

7.7High risk

Vulners AI Score7.7

CVSS 3.19.8

CVSS 210

EPSS0.64766

SSVC

h2database security update cve-2021-42392 cve-2022-23221 remote code execution debian stretch