CVE-2024-22682

Опубликовано: 30 янв. 2024

Источник: redhat

Описание

No description is available for this CVE.

Отчет

This CVE has been marked as Rejected by the assigning CNA.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2024-22682
https://nvd.nist.gov/vuln/detail/CVE-2024-22682
https://github.com/Tu0Laj1/database_test

Дополнительная информация

https://bugzilla.redhat.com/show_bug.cgi?id=2261875duckdb: malicious extension injection via the custom extension feature

Связанные уязвимости

CVE-2024-22682

nvd

больше 2 лет назад

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

GHSA-fq57-m32w-cmv5

CVSS3: 9.8

github

больше 2 лет назад

DuckDB <=0.9.2 and DuckDB extension-template <=0.9.2 are vulnerable to malicious extension injection via the custom extension feature.