CVE Vulnerabilities

CVE-2022-27452

Published: Apr 14, 2022 | Modified: Sep 29, 2022
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc.

Affected Software

Name Vendor Start Version End Version
Mariadb Mariadb 10.3.0 (including) 10.3.35 (excluding)
Mariadb Mariadb 10.4.0 (including) 10.4.25 (excluding)
Mariadb Mariadb 10.5.0 (including) 10.5.16 (excluding)
Mariadb Mariadb 10.6.0 (including) 10.6.8 (excluding)
Mariadb Mariadb 10.7.0 (including) 10.7.4 (excluding)
Red Hat Enterprise Linux 8 RedHat mariadb:10.5-8060020220614163302.ad008a3a *
Red Hat Enterprise Linux 8 RedHat mariadb:10.3-8060020220715055054.ad008a3a *
Red Hat Enterprise Linux 9 RedHat mariadb-3:10.5.16-2.el9_0 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat rh-mariadb105-mariadb-3:10.5.16-2.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat rh-mariadb103-mariadb-3:10.3.35-1.el7 *
Mariadb-10.1 Ubuntu bionic *
Mariadb-10.1 Ubuntu trusty *
Mariadb-10.1 Ubuntu xenial *
Mariadb-10.3 Ubuntu focal *
Mariadb-10.3 Ubuntu trusty *
Mariadb-10.3 Ubuntu xenial *
Mariadb-10.5 Ubuntu impish *
Mariadb-10.5 Ubuntu trusty *
Mariadb-10.5 Ubuntu xenial *
Mariadb-10.6 Ubuntu jammy *
Mariadb-10.6 Ubuntu kinetic *
Mariadb-10.6 Ubuntu trusty *
Mariadb-10.6 Ubuntu xenial *

References