UBUNTU-CVE-2022-4399
Dashboard / Vulnerabilities / UBUNTU-CVE-2022-4399
Summary:
Details: A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/db.c. The manipulation of the argument value/name leads to sql injection. The name of the patch is 7a7d737a3929f335b9717ddbd31db91151b69ad2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215252.
References: https://ubuntu.com/security/CVE-2022-4399, https://github.com/TicklishHoneyBee/nodau/pull/26, https://www.cve.org/CVERecord?id=CVE-2022-4399
Affected packages
Package
Name: nodau
Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=xenial
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
0.3.7-1
0.3.7-1build1
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
