UBUNTU-CVE-2022-22965

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2022-22965
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-22965.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2022-22965
Upstream
Downstream
Related
Published
2022-04-01T23:15:00Z
Modified
2025-10-24T04:53:27Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
  • Ubuntu - high
Summary
[none]
Details

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.

References

Affected packages

Ubuntu:25.04

libspring-java

Package

Name
libspring-java
Purl
pkg:deb/ubuntu/libspring-java@4.3.30-2ubuntu1?arch=source&distro=plucky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.30-2ubuntu1

Affected versions

4.*

4.3.30-2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-aop-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-beans-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-context-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-context-support-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-core-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-expression-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-instrument-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-jdbc-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-jms-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-messaging-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-orm-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-oxm-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-test-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-transaction-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-web-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-web-portlet-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-web-servlet-java"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:25.10

libspring-java

Package

Name
libspring-java
Purl
pkg:deb/ubuntu/libspring-java@4.3.30-2ubuntu1?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.30-2ubuntu1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-aop-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-beans-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-context-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-context-support-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-core-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-expression-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-instrument-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-jdbc-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-jms-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-messaging-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-orm-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-oxm-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-test-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-transaction-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-web-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-web-portlet-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu1",
            "binary_name": "libspring-web-servlet-java"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:Pro:18.04:LTS

libspring-java

Package

Name
libspring-java
Purl
pkg:deb/ubuntu/libspring-java@4.3.22-1~18.04.1~esm1?arch=source&distro=esm-apps/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.22-1~18.04.1~esm1

Affected versions

4.*

4.3.11-1
4.3.12-1
4.3.13-2
4.3.14-1
4.3.22-1~18.04

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-aop-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-beans-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-context-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-context-support-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-core-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-expression-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-instrument-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-jdbc-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-jms-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-messaging-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-orm-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-oxm-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-test-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-transaction-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-web-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-web-portlet-java"
        },
        {
            "binary_version": "4.3.22-1~18.04.1~esm1",
            "binary_name": "libspring-web-servlet-java"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}

Ubuntu:Pro:20.04:LTS

libspring-java

Package

Name
libspring-java
Purl
pkg:deb/ubuntu/libspring-java@4.3.22-4ubuntu0.1~esm1?arch=source&distro=esm-apps/focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.22-4ubuntu0.1~esm1

Affected versions

4.*

4.3.22-4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-aop-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-beans-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-context-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-context-support-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-core-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-expression-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-instrument-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-jdbc-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-jms-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-messaging-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-orm-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-oxm-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-test-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-transaction-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-web-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-web-portlet-java"
        },
        {
            "binary_version": "4.3.22-4ubuntu0.1~esm1",
            "binary_name": "libspring-web-servlet-java"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}

Ubuntu:Pro:22.04:LTS

libspring-java

Package

Name
libspring-java
Purl
pkg:deb/ubuntu/libspring-java@4.3.30-1ubuntu0.1~esm1?arch=source&distro=esm-apps/jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.30-1ubuntu0.1~esm1

Affected versions

4.*

4.3.30-1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-aop-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-beans-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-context-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-context-support-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-core-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-expression-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-instrument-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-jdbc-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-jms-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-messaging-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-orm-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-oxm-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-test-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-transaction-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-web-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-web-portlet-java"
        },
        {
            "binary_version": "4.3.30-1ubuntu0.1~esm1",
            "binary_name": "libspring-web-servlet-java"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}

Ubuntu:Pro:24.04:LTS

libspring-java

Package

Name
libspring-java
Purl
pkg:deb/ubuntu/libspring-java@4.3.30-2ubuntu0.24.04.1~esm1?arch=source&distro=esm-apps/noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.30-2ubuntu0.24.04.1~esm1

Affected versions

4.*

4.3.30-2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-aop-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-beans-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-context-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-context-support-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-core-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-expression-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-instrument-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-jdbc-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-jms-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-messaging-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-orm-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-oxm-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-test-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-transaction-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-web-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-web-portlet-java"
        },
        {
            "binary_version": "4.3.30-2ubuntu0.24.04.1~esm1",
            "binary_name": "libspring-web-servlet-java"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}