Vulnerability CVE-2022-27444: Information

Description

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Published: April 14, 2022
Modified: July 19, 2022

Fixed packages

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://jira.mariadb.org/browse/MDEV-28080
  • Exploit
  • Issue Tracking
  • Vendor Advisory
https://security.netapp.com/advisory/ntap-20220526-0006/
  • Third Party Advisory
    1. Configuration 1

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.7.0
      End excliding
      10.7.4

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.4.0
      End excliding
      10.4.25

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.5.0
      End excliding
      10.5.16

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.6.0
      End excliding
      10.6.8