CVE-2011-1522: SQL Injection
First published: Mon Mar 21 2011(Updated: )
Latest upstream release: 1.2.4 Current version in Fedora Rawhide: 1.2.3 URL: <a href="http://pear.doctrine-project.org/feed.xml">http://pear.doctrine-project.org/feed.xml</a> Please consult the package updates policy before you issue an update to a stable branch: <a href="https://fedoraproject.org/wiki/Updates_Policy">https://fedoraproject.org/wiki/Updates_Policy</a> More information about the service that created this bug can be found at: <a href="https://fedoraproject.org/wiki/Upstream_release_monitoring">https://fedoraproject.org/wiki/Upstream_release_monitoring</a>
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| doctrine-project Object Relational Mapper | ||
| doctrine-project Object Relational Mapper | ||
| doctrine-project Object Relational Mapper | ||
| doctrine-project Object Relational Mapper | ||
| doctrine-project Object Relational Mapper | =2.0.0 | |
| doctrine-project Object Relational Mapper | =2.0.0-alpha1 | |
| doctrine-project Object Relational Mapper | =2.0.0-alpha2 | |
| doctrine-project Object Relational Mapper | =2.0.0-alpha3 | |
| doctrine-project Object Relational Mapper | =2.0.0-alpha4 | |
| doctrine-project Object Relational Mapper | =2.0.0-beta1 | |
| doctrine-project Object Relational Mapper | =2.0.0-beta2 | |
| doctrine-project Object Relational Mapper | =2.0.0-beta3 | |
| doctrine-project Object Relational Mapper | =2.0.0-beta4 | |
| doctrine-project Object Relational Mapper | =2.0.0-rc1 | |
| doctrine-project Object Relational Mapper | =2.0.0-rc2 | |
| doctrine-project Object Relational Mapper | =2.0.1 | |
| doctrine-project Object Relational Mapper | =2.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=689396
- http://www.doctrine-project.org/blog/doctrine-security-fix
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622674
- http://www.securityfocus.com/bid/47034
- http://openwall.com/lists/oss-security/2011/03/28/3
- http://openwall.com/lists/oss-security/2011/03/25/2
- http://www.debian.org/security/2011/dsa-2223
- http://pear.doctrine-project.org/feed.xml
- https://fedoraproject.org/wiki/Updates_Policy
- https://fedoraproject.org/wiki/Upstream_release_monitoring
- https://admin.fedoraproject.org/updates/php-doctrine-Doctrine-1.2.4-1.fc15
- https://admin.fedoraproject.org/updates/php-doctrine-Doctrine-1.2.4-1.fc14
- https://admin.fedoraproject.org/updates/php-doctrine-Doctrine-1.2.4-1.el6
- http://permalink.gmane.org/gmane.comp.security.oss.general/4623
Frequently Asked Questions
What is the severity of CVE-2011-1522?
CVE-2011-1522 has a moderate severity level, which indicates it could lead to some impact but not critical issues.
How do I fix CVE-2011-1522?
To fix CVE-2011-1522, upgrade to version 1.2.4 or later of the Doctrine Object Relational Mapper.
Which versions of Doctrine are affected by CVE-2011-1522?
CVE-2011-1522 affects Doctrine versions 1.2.0 through 1.2.3 and 2.0.0 alpha, beta, and release candidate versions.
Is there a patch available for CVE-2011-1522?
Yes, the patch for CVE-2011-1522 is included in the updated version 1.2.4 of the Doctrine ORM.
What are the potential vulnerabilities of CVE-2011-1522?
The potential vulnerabilities of CVE-2011-1522 could lead to application integrity issues or data leakage under certain circumstances.
- agent/type
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/author
- agent/weakness
- agent/severity
- agent/references
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-1522
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/doctrine-project
- canonical/doctrine-project object relational mapper
- version/doctrine-project object relational mapper/2.0.0
- version/doctrine-project object relational mapper/2.0.0-alpha1
- version/doctrine-project object relational mapper/2.0.0-alpha2
- version/doctrine-project object relational mapper/2.0.0-alpha3
- version/doctrine-project object relational mapper/2.0.0-alpha4
- version/doctrine-project object relational mapper/2.0.0-beta1
- version/doctrine-project object relational mapper/2.0.0-beta2
- version/doctrine-project object relational mapper/2.0.0-beta3
- version/doctrine-project object relational mapper/2.0.0-beta4
- version/doctrine-project object relational mapper/2.0.0-rc1
- version/doctrine-project object relational mapper/2.0.0-rc2
- version/doctrine-project object relational mapper/2.0.1
- version/doctrine-project object relational mapper/2.0.2