Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
172
security advisorycriticalcode executionCritical H2 Code Vulnerability in Ubuntu 16.04 & 18.04 USN-6834-1 Alert
H2 could be made to allow arbitrary code execution.. ========================================================================== Ubuntu Security Notice USN-6834-1 June 13, 2024 h2database vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: H2 could be made to allow arbitrary code execution. Software Description: - h2database: H2 Database Engine Details: It was discovered that H2 was vulnerable to deserialization of untrusted data. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-42392) It was discovered that H2 incorrectly handled some specially crafted connection URLs. An attacker could possibly use this issue to execute arbitrary code. (CVE-2022-23221) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS libh2-java 1.4.196-2ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS libh2-java 1.4.191-1ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6834-1 CVE-2021-42392, CVE-2022-23221 . H2 database on Ubuntu 18.04 and 16.04 faces critical vulnerabilities allowing unauthorized code execution. Update immediately to secure your system. H2 Database Engine,Avoid Arbitrary Code Execution,Ubuntu Security Update. . Severity: Critical. LinuxSecurity.com Team
Jun 13, 2024
•Critical
Ubuntu
172
security advisorycriticalarbitrary code executionUbuntu 20.04 And 21.10 USN-5365-1 Critical H2 Database Threats
Several security issues were fixed in H2.. =========================================================================Ubuntu Security Notice USN-5365-1 April 05, 2022 h2database vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 21.10 - Ubuntu 20.04 LTS Summary: Several security issues were fixed in H2. Software Description: - h2database: H2 Database Engine Details: It was discovered that H2 was vulnerable to deserialization of untrusted data. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-42392) It was discovered that H2 incorrectly handled some specially crafted connection URLs. An attacker could possibly use this issue to execute arbitrary code. (CVE-2022-23221) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 21.10: libh2-java 1.4.197-4+deb10u1build0.21.10.1 Ubuntu 20.04 LTS: libh2-java 1.4.197-4+deb10u1build0.20.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5365-1 CVE-2021-42392, CVE-2022-23221 Package Information: https://launchpad.net/ubuntu/+source/h2database/1.4.197-4+deb10u1build0.21.10.1 https://launchpad.net/ubuntu/+source/h2database/1.4.197-4+deb10u1build0.20.04.1 . Follow these critical steps to mitigate H2 vulnerabilities on Ubuntu 20.04 and 21.10: Update package manager, apply updates, and reboot for security.. H2 Database Security, Ubuntu Update, Code Execution Risks, Security Advisories. . Severity: Critical. LinuxSecurity.com Team
Apr 05, 2022
•Critical
Ubuntu
87
security advisorysecurity updateremote code executionDebian: DSA-5076-1 Security Update For H2Database Critical RCE Threats
Security researchers of JFrog Security and Ismail Aydemir discovered two remote code execution vulnerabilities in the H2 Java SQL database engine which can be exploited through various attack vectors, most notably through the H2 Console and by loading custom classes from remote servers through JNDI. The H2 console . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5076-1
Feb 15, 2022
•Critical
Debian
197
security advisorycriticalremote code executionDebian 9 Stretch: DLA-2923-1 Critical: H2 Remote Code Execution
Security researchers of JFrog Security and Ismail Aydemir discovered two remote code execution vulnerabilities in the H2 Java SQL database engine which can be exploited through various attack vectors, most notably through the H2 Console and by loading custom classes from remote servers through . -------------------------------------------------------------------------Debian LTS Advisory DLA-2923-1
Feb 14, 2022
•Critical
Debian LTS
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!