PT-2022-27057 · Unknown+1 · Ticklishhoneybee Nodau+1

Mromerdagan · Published 2022-12-10 · Updated 2022-12-13 · CVE-2022-4399

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TicklishHoneyBee nodau (affected versions not specified)

Description A critical issue was found in TicklishHoneyBee nodau, affecting some unknown functionality of the file src/db.c. The manipulation of the value/name argument leads to sql injection.

Recommendations Apply a patch to fix this issue. The patch is identified by the name 7a7d737a3929f335b9717ddbd31db91151b69ad2.

Fix

Improper Neutralization

SQL injection

Weakness Enumeration

CWE-707

CWE-89

Related Identifiers

CVE-2022-4399

Affected Products

Debian

Ticklishhoneybee Nodau

References · 12

• https://github.com/TicklishHoneyBee/nodau/commit/7a7d737a3929f335b9717ddbd31db91151b69ad2 · Patch
• https://github.com/TicklishHoneyBee/nodau/pull/26 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-4399 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4399 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-4399 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-4399 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4399 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-4399 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-4399 · Vendor Advisory
• https://t.me/cvenotify/39740 · Telegram Post
• https://t.me/cvenotify/39574 · Telegram Post
• https://vuldb.com/?id.215252 · Note