CVE catalog

CVE-2023-1183

hsqldb: CVE-2023-1183

[CVE catalog]

Severity
Medium · CVSS 5CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
64.63% · Oct 25, 2026

A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianhsqldbsid2.7.4-1fixed
Debianhsqldbforky2.7.4-1fixed
Debianhsqldbtrixie2.7.4-1fixed
Debianhsqldbbookworm2.7.1-1+deb12u1fixed
Debianhsqldbbookworm-security2.7.1-1+deb12u1fixed
Debianhsqldb1.8.0sid1.8.0.10+dfsg2-3fixed
Debianhsqldb1.8.0forky1.8.0.10+dfsg2-3fixed
Debianhsqldb1.8.0trixie1.8.0.10+dfsg-12.1+deb13u1fixed
Debianhsqldb1.8.0trixie-security1.8.0.10+dfsg-12.1+deb13u1fixed
Debianhsqldb1.8.0bookworm1.8.0.10+dfsg-11+deb12u1fixed
Debianhsqldb1.8.0bookworm-security1.8.0.10+dfsg-11+deb12u1fixed
Ubuntuhsqldb1.8.0pro1.8.0.10+dfsg-10vulnerable
Ubuntuhsqldb1.8.0pro1.8.0.10+dfsg-10ubuntu0.20.04.1~esm1fixed
Ubuntuhsqldb1.8.022.041.8.0.10+dfsg-10vulnerable
Ubuntuhsqldb1.8.022.041.8.0.10+dfsg-11vulnerable
Ubuntuhsqldb1.8.022.041.8.0.10+dfsg-11+deb12u1build0.22.04.1fixed
Ubuntuhsqldb1.8.0pro1.8.0.10+dfsg-10vulnerable
Ubuntuhsqldb1.8.0pro1.8.0.10+dfsg-10ubuntu0.20.04.1~esm1fixed
Ubuntuhsqldb1.8.022.041.8.0.10+dfsg-10vulnerable
Ubuntuhsqldb1.8.022.041.8.0.10+dfsg-11vulnerable
Ubuntuhsqldb1.8.022.041.8.0.10+dfsg-11+deb12u1build0.22.04.1fixed
Susefrozenlinux enterprise module for package hub 15 sp41.1.1-150400.9.3.2fixed
Suselibixionlinux enterprise module for package hub 15 sp40.18.1-150400.14.3.2fixed
Suseliborcuslinux enterprise module for package hub 15 sp40.18.1-150400.13.3.2fixed
Suselibreofficelinux enterprise module for package hub 15 sp47.6.2.1-150400.17.17.3fixed
Susemdds-2_1linux enterprise module for package hub 15 sp42.1.1-150400.9.3.2fixed
Susefrozenlinux enterprise module for package hub 15 sp51.1.1-150400.9.3.2fixed
Suselibixionlinux enterprise module for package hub 15 sp50.18.1-150400.14.3.2fixed
Suseliborcuslinux enterprise module for package hub 15 sp50.18.1-150400.13.3.2fixed
Suselibreofficelinux enterprise module for package hub 15 sp57.6.2.1-150400.17.17.3fixed
Susemdds-2_1linux enterprise module for package hub 15 sp52.1.1-150400.9.3.2fixed
Suselibixionlinux enterprise workstation extension 15 sp40.18.1-150400.14.3.2fixed
Suseliborcuslinux enterprise workstation extension 15 sp40.18.1-150400.13.3.2fixed
Suselibreofficelinux enterprise workstation extension 15 sp47.6.2.1-150400.17.17.3fixed
Suselibixionlinux enterprise workstation extension 15 sp50.18.1-150400.14.3.2fixed
Suseliborcuslinux enterprise workstation extension 15 sp50.18.1-150400.13.3.2fixed
Suselibreofficelinux enterprise workstation extension 15 sp57.6.2.1-150400.17.17.3fixed
Opensusefrozenleap 15.41.1.1-150400.9.3.2fixed
Opensuselibixionleap 15.40.18.1-150400.14.3.2fixed
Opensuseliborcusleap 15.40.18.1-150400.13.3.2fixed
Opensuselibreofficeleap 15.47.6.2.1-150400.17.17.3fixed
Opensusemdds-2_1leap 15.42.1.1-150400.9.3.2fixed
Opensusefrozenleap 15.51.1.1-150400.9.3.2fixed
Opensuselibixionleap 15.50.18.1-150400.14.3.2fixed
Opensuseliborcusleap 15.50.18.1-150400.13.3.2fixed
Opensuselibreofficeleap 15.57.6.2.1-150400.17.17.3fixed
Opensusemdds-2_1leap 15.52.1.1-150400.9.3.2fixed
Susefrozenlinux enterprise software development kit 12 sp51.1.1-8.3.3fixed
Suselibetonyeklinux enterprise software development kit 12 sp50.1.10-10.11.2fixed
Suselibixionlinux enterprise software development kit 12 sp50.18.1-21.3.3fixed
Suseliborcuslinux enterprise software development kit 12 sp50.18.1-18.3.3fixed
Suselibreofficelinux enterprise software development kit 12 sp57.6.2.1-48.47.6fixed
Susemdds-2_1linux enterprise software development kit 12 sp52.1.1-8.3.3fixed
Suselibetonyeklinux enterprise workstation extension 12 sp50.1.10-10.11.2fixed
Suselibixionlinux enterprise workstation extension 12 sp50.18.1-21.3.3fixed
Suseliborcuslinux enterprise workstation extension 12 sp50.18.1-18.3.3fixed
Suselibreofficelinux enterprise workstation extension 12 sp57.6.2.1-48.47.6fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianhsqldbsourcesid2.7.2-1not yet assignedNot reportedNot reported
Debianhsqldbsourceforky2.7.2-1not yet assignedNot reportedNot reported
Debianhsqldbsourcetrixie2.7.2-1not yet assignedNot reportedNot reported
Debianhsqldbsourcebookworm2.7.1-1+deb12u1not yet assignedNot reportedNot reported
Debianhsqldb1.8.0sourcesid1.8.0.10+dfsg-14not yet assignedNot reportedNot reported
Debianhsqldb1.8.0sourceforky1.8.0.10+dfsg-14not yet assignedNot reportedNot reported
Debianhsqldb1.8.0sourcetrixie1.8.0.10+dfsg-12.1+deb13u1not yet assignedNot reportedNot reported
Debianhsqldb1.8.0sourcebookworm1.8.0.10+dfsg-11+deb12u1not yet assignedNot reportedNot reported
Ubuntuhsqldb1.8.0debpro1.8.0.10+dfsg-10ubuntu0.20.04.1~esm1Not reportedUSN-8735-1Not reported
Ubuntuhsqldb1.8.0deb22.041.8.0.10+dfsg-11+deb12u1build0.22.04.1Not reportedUSN-8735-1Not reported
Ubuntuhsqldb1.8.0debpro1.8.0.10+dfsg-10ubuntu0.20.04.1~esm1Not reportedUBUNTU-CVE-2023-1183Not reported
Ubuntuhsqldb1.8.0deb22.041.8.0.10+dfsg-11+deb12u1build0.22.04.1Not reportedUBUNTU-CVE-2023-1183Not reported
Susefrozenrpmlinux enterprise module for package hub 15 sp41.1.1-150400.9.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Suselibixionrpmlinux enterprise module for package hub 15 sp40.18.1-150400.14.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Suseliborcusrpmlinux enterprise module for package hub 15 sp40.18.1-150400.13.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Suselibreofficerpmlinux enterprise module for package hub 15 sp47.6.2.1-150400.17.17.3Not reportedSUSE-SU-2023:4496-1Not reported
Susemdds-2_1rpmlinux enterprise module for package hub 15 sp42.1.1-150400.9.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Susefrozenrpmlinux enterprise module for package hub 15 sp51.1.1-150400.9.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Suselibixionrpmlinux enterprise module for package hub 15 sp50.18.1-150400.14.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Suseliborcusrpmlinux enterprise module for package hub 15 sp50.18.1-150400.13.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Suselibreofficerpmlinux enterprise module for package hub 15 sp57.6.2.1-150400.17.17.3Not reportedSUSE-SU-2023:4496-1Not reported
Susemdds-2_1rpmlinux enterprise module for package hub 15 sp52.1.1-150400.9.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Suselibixionrpmlinux enterprise workstation extension 15 sp40.18.1-150400.14.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Suseliborcusrpmlinux enterprise workstation extension 15 sp40.18.1-150400.13.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Suselibreofficerpmlinux enterprise workstation extension 15 sp47.6.2.1-150400.17.17.3Not reportedSUSE-SU-2023:4496-1Not reported
Suselibixionrpmlinux enterprise workstation extension 15 sp50.18.1-150400.14.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Suseliborcusrpmlinux enterprise workstation extension 15 sp50.18.1-150400.13.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Suselibreofficerpmlinux enterprise workstation extension 15 sp57.6.2.1-150400.17.17.3Not reportedSUSE-SU-2023:4496-1Not reported
Opensusefrozenrpmleap 15.41.1.1-150400.9.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Opensuselibixionrpmleap 15.40.18.1-150400.14.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Opensuseliborcusrpmleap 15.40.18.1-150400.13.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Opensuselibreofficerpmleap 15.47.6.2.1-150400.17.17.3Not reportedSUSE-SU-2023:4496-1Not reported
Opensusemdds-2_1rpmleap 15.42.1.1-150400.9.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Opensusefrozenrpmleap 15.51.1.1-150400.9.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Opensuselibixionrpmleap 15.50.18.1-150400.14.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Opensuseliborcusrpmleap 15.50.18.1-150400.13.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Opensuselibreofficerpmleap 15.57.6.2.1-150400.17.17.3Not reportedSUSE-SU-2023:4496-1Not reported
Opensusemdds-2_1rpmleap 15.52.1.1-150400.9.3.2Not reportedSUSE-SU-2023:4496-1Not reported
Susefrozenrpmlinux enterprise software development kit 12 sp51.1.1-8.3.3Not reportedSUSE-SU-2023:4648-1Not reported
Suselibetonyekrpmlinux enterprise software development kit 12 sp50.1.10-10.11.2Not reportedSUSE-SU-2023:4648-1Not reported
Suselibixionrpmlinux enterprise software development kit 12 sp50.18.1-21.3.3Not reportedSUSE-SU-2023:4648-1Not reported
Suseliborcusrpmlinux enterprise software development kit 12 sp50.18.1-18.3.3Not reportedSUSE-SU-2023:4648-1Not reported
Suselibreofficerpmlinux enterprise software development kit 12 sp57.6.2.1-48.47.6Not reportedSUSE-SU-2023:4648-1Not reported
Susemdds-2_1rpmlinux enterprise software development kit 12 sp52.1.1-8.3.3Not reportedSUSE-SU-2023:4648-1Not reported
Suselibetonyekrpmlinux enterprise workstation extension 12 sp50.1.10-10.11.2Not reportedSUSE-SU-2023:4648-1Not reported
Suselibixionrpmlinux enterprise workstation extension 12 sp50.18.1-21.3.3Not reportedSUSE-SU-2023:4648-1Not reported
Suseliborcusrpmlinux enterprise workstation extension 12 sp50.18.1-18.3.3Not reportedSUSE-SU-2023:4648-1Not reported
Suselibreofficerpmlinux enterprise workstation extension 12 sp57.6.2.1-48.47.6Not reportedSUSE-SU-2023:4648-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]