UBUNTU-CVE-2022-44729
- Source
- https://ubuntu.com/security/CVE-2022-44729
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-44729.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2022-44729
- Related
- Published
- 2023-08-22T19:16:00Z
- Modified
- 2024-10-15T14:10:17Z
- Severity
-
- 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later.
- References
-
- https://ubuntu.com/security/CVE-2022-44729
- https://www.openwall.com/lists/oss-security/2023/08/22/2
- https://issues.apache.org/jira/browse/BATIK-1349
- https://lists.apache.org/thread/hco2nw1typoorz33qzs0fcdx0ws6d6j2
- https://xmlgraphics.apache.org/security.html
- http://www.openwall.com/lists/oss-security/2023/08/22/4
- http://www.openwall.com/lists/oss-security/2023/08/22/2
- https://www.cve.org/CVERecord?id=CVE-2022-44729
Affected packages
Ubuntu:Pro:16.04:LTS / batik
Package
- Name
- batik
- Purl
- pkg:deb/ubuntu/batik?arch=src?distro=esm-apps/xenial
Ubuntu:Pro:18.04:LTS / batik
Package
- Name
- batik
- Purl
- pkg:deb/ubuntu/batik?arch=src?distro=esm-apps/bionic
Ubuntu:20.04:LTS / batik
Package
- Name
- batik
- Purl
- pkg:deb/ubuntu/batik?arch=src?distro=focal
Ubuntu:22.04:LTS / batik
Package
- Name
- batik
- Purl
- pkg:deb/ubuntu/batik?arch=src?distro=jammy
Ubuntu:24.10 / batik
Package
- Name
- batik
- Purl
- pkg:deb/ubuntu/batik?arch=src?distro=oracular