Vulnerability CVE-2022-32086: Information

Description

MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Published: July 1, 2022
Modified: Oct. 25, 2022

Fixed packages

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://jira.mariadb.org/browse/MDEV-26412
  • Exploit
  • Issue Tracking
  • Third Party Advisory
https://security.netapp.com/advisory/ntap-20220826-0007/
  • Third Party Advisory
    1. Configuration 1

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.7.0
      End excliding
      10.7.4

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.4.0
      End excliding
      10.4.25

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.5.0
      End excliding
      10.5.16

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.6.0
      End excliding
      10.6.8