Vulnerability · Published Dec 10, 2022 · Assigned by VulDB

CVE-2022-4399TicklishHoneyBee nodau db.c sql injection

Medium 5.5

In plain English

A medium-severity security flaw in nodau from TicklishHoneyBee. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.8%top 43.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/db.c. The manipulation of the argument value/name leads to sql injection. The name of the patch is 7a7d737a3929f335b9717ddbd31db91151b69ad2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215252.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	nodau	0.3.8-5	DEBIAN-CVE-2022-4399
Debian:13	nodau	0.3.8-5	DEBIAN-CVE-2022-4399
Debian:14	nodau	0.3.8-5	DEBIAN-CVE-2022-4399
Ubuntu:22.04:LTS	nodau	no fix listed	UBUNTU-CVE-2022-4399

Affected products (as reported)

Vendor	Product	Versions
TicklishHoneyBee	nodau	n/a

Weakness: CWE-707 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

In plain English

Official description

Affected packages & fixed versions

Affected products (as reported)

References