Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2022-27458 (GCVE-0-2022-27458)
Vulnerability from cvelistv5 – Published: – Updated: 2024-05-01 21:46DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate.
Show details on NVD website{
"containers": {
"cna": {
"providerMetadata": {
"dateUpdated": "2024-05-01T21:46:11.634Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"rejectedReasons": [
{
"lang": "en",
"value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2022-27458",
"dateRejected": "2024-05-01T00:00:00.000Z",
"dateReserved": "2022-03-21T00:00:00.000Z",
"dateUpdated": "2024-05-01T21:46:11.634Z",
"state": "REJECTED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.0",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"descriptions": [
{
"lang": "en",
"value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate."
}
],
"id": "CVE-2022-27458",
"lastModified": "2024-05-01T22:15:09.480",
"published": "2022-04-14T13:15:12.223",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Rejected"
},
"nvd": {
"cve": {
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate."
}
],
"id": "CVE-2022-27458",
"lastModified": "2024-05-01T22:15:09.480",
"metrics": {},
"published": "2022-04-14T13:15:12.223",
"references": [],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Rejected"
}
},
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2026-06-28T06:25:48+00:00",
"cve": "CVE-2022-27458",
"id": "CVE-2022-27458",
"initial_release_date": "2022-01-01T00:00:00+00:00",
"product_status:fixed": "736",
"product_status:known_affected": "19",
"product_status:known_not_affected": "35",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "mariadb: use-after-poison in Binary_string::free_buffer",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-27458.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-09-12T17:13:44Z",
"cve": "CVE-2022-27458",
"id": "CVE-2022-27458",
"initial_release_date": "2023-02-15T03:26:49Z",
"product_status:known_not_affected": "93",
"product_status:recommended": "379",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2022-27458",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-27458.json",
"version": "27"
}
}
}
GHSA-MQ95-27MR-XGRH
Vulnerability from github – Published: 2022-04-15 00:00 – Updated: 2024-05-02 00:30MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Binary_string::free_buffer() at /sql/sql_string.h.
{
"affected": [],
"aliases": [
"CVE-2022-27458"
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-04-14T13:15:00Z",
"severity": "HIGH"
},
"details": "MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Binary_string::free_buffer() at /sql/sql_string.h.",
"id": "GHSA-mq95-27mr-xgrh",
"modified": "2024-05-02T00:30:47Z",
"published": "2022-04-15T00:00:43Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27458"
},
{
"type": "WEB",
"url": "https://jira.mariadb.org/browse/MDEV-28099"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20220526-0007"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2022-27458
Vulnerability from gsd - Updated: 2023-12-13 01:19{
"GSD": {
"alias": "CVE-2022-27458",
"description": "MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Binary_string::free_buffer() at /sql/sql_string.h.",
"id": "GSD-2022-27458",
"references": [
"https://www.suse.com/security/cve/CVE-2022-27458.html",
"https://access.redhat.com/errata/RHSA-2022:5759",
"https://access.redhat.com/errata/RHSA-2022:5826",
"https://access.redhat.com/errata/RHSA-2022:5948",
"https://access.redhat.com/errata/RHSA-2022:6306",
"https://access.redhat.com/errata/RHSA-2022:6443",
"https://ubuntu.com/security/CVE-2022-27458"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2022-27458"
],
"details": "MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Binary_string::free_buffer() at /sql/sql_string.h.",
"id": "GSD-2022-27458",
"modified": "2023-12-13T01:19:40.961852Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-27458",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Binary_string::free_buffer() at /sql/sql_string.h."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jira.mariadb.org/browse/MDEV-28099",
"refsource": "MISC",
"url": "https://jira.mariadb.org/browse/MDEV-28099"
},
{
"name": "https://security.netapp.com/advisory/ntap-20220526-0007/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20220526-0007/"
},
{
"name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.3.35",
"versionStartIncluding": "10.3.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.7.4",
"versionStartIncluding": "10.7.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.4.25",
"versionStartIncluding": "10.4.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.5.16",
"versionStartIncluding": "10.5.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.6.8",
"versionStartIncluding": "10.6.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-27458"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Binary_string::free_buffer() at /sql/sql_string.h."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jira.mariadb.org/browse/MDEV-28099",
"refsource": "MISC",
"tags": [
"Exploit",
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"url": "https://jira.mariadb.org/browse/MDEV-28099"
},
{
"name": "https://security.netapp.com/advisory/ntap-20220526-0007/",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20220526-0007/"
},
{
"name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
},
"lastModifiedDate": "2022-10-08T03:11Z",
"publishedDate": "2022-04-14T13:15Z"
}
}
}
ICSA-26-027-02
Vulnerability from csaf_cisa - Published: 2024-02-27 12:00 - Updated: 2026-01-27 16:20MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Binary_string::free_buffer() at /sql/sql_string.h.
OESA-2022-1681 (CVE-2022-27379)
Vulnerability from osv_openeuler – Published: 2022-05-28 11:04 – Updated: 2026-08-06 11:04 – Source websiteMariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.
Security Fix(es):
An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.(CVE-2022-27379)
MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.(CVE-2022-27386)
MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.(CVE-2022-27387)
An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.(CVE-2022-27384)
An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.(CVE-2022-27380)
MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements.(CVE-2022-27383)
An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.(CVE-2022-27381)
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.(CVE-2022-27377)
An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.(CVE-2022-27378)
MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements.(CVE-2022-27376)
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc.(CVE-2022-27452)
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Binary_string::free_buffer() at /sql/sql_string.h.(CVE-2022-27458)
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.(CVE-2022-27456)
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.(CVE-2022-27445)
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.(CVE-2022-27449)
There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc.(CVE-2022-27448)
MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.(CVE-2022-27447)
An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.(CVE-2022-27385)
MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order.(CVE-2022-27382)
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc.(CVE-2022-27451)
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c.(CVE-2022-27457)
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h.(CVE-2022-27446)
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc.(CVE-2022-27444)
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c.(CVE-2022-27455)
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"mariadb-server-10.3.35-1.oe1.aarch64.rpm",
"mariadb-server-galera-10.3.35-1.oe1.aarch64.rpm",
"mariadb-gssapi-server-10.3.35-1.oe1.aarch64.rpm",
"mariadb-10.3.35-1.oe1.aarch64.rpm",
"mariadb-embedded-devel-10.3.35-1.oe1.aarch64.rpm",
"mariadb-debugsource-10.3.35-1.oe1.aarch64.rpm",
"mariadb-test-10.3.35-1.oe1.aarch64.rpm",
"mariadb-devel-10.3.35-1.oe1.aarch64.rpm",
"mariadb-oqgraph-engine-10.3.35-1.oe1.aarch64.rpm",
"mariadb-errmessage-10.3.35-1.oe1.aarch64.rpm",
"mariadb-cracklib-10.3.35-1.oe1.aarch64.rpm",
"mariadb-debuginfo-10.3.35-1.oe1.aarch64.rpm",
"mariadb-embedded-10.3.35-1.oe1.aarch64.rpm",
"mariadb-backup-10.3.35-1.oe1.aarch64.rpm",
"mariadb-common-10.3.35-1.oe1.aarch64.rpm"
],
"src": [
"mariadb-10.3.35-1.oe1.src.rpm"
],
"x86_64": [
"mariadb-errmessage-10.3.35-1.oe1.x86_64.rpm",
"mariadb-test-10.3.35-1.oe1.x86_64.rpm",
"mariadb-debugsource-10.3.35-1.oe1.x86_64.rpm",
"mariadb-embedded-devel-10.3.35-1.oe1.x86_64.rpm",
"mariadb-backup-10.3.35-1.oe1.x86_64.rpm",
"mariadb-10.3.35-1.oe1.x86_64.rpm",
"mariadb-server-10.3.35-1.oe1.x86_64.rpm",
"mariadb-gssapi-server-10.3.35-1.oe1.x86_64.rpm",
"mariadb-server-galera-10.3.35-1.oe1.x86_64.rpm",
"mariadb-debuginfo-10.3.35-1.oe1.x86_64.rpm",
"mariadb-oqgraph-engine-10.3.35-1.oe1.x86_64.rpm",
"mariadb-common-10.3.35-1.oe1.x86_64.rpm",
"mariadb-embedded-10.3.35-1.oe1.x86_64.rpm",
"mariadb-cracklib-10.3.35-1.oe1.x86_64.rpm",
"mariadb-devel-10.3.35-1.oe1.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:20.03-LTS-SP1",
"name": "mariadb",
"purl": "pkg:rpm/openEuler/mariadb\u0026distro=openEuler-20.03-LTS-SP1"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "10.3.35-1.oe1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"ecosystem_specific": {
"aarch64": [
"mariadb-backup-10.3.35-1.oe1.aarch64.rpm",
"mariadb-cracklib-10.3.35-1.oe1.aarch64.rpm",
"mariadb-common-10.3.35-1.oe1.aarch64.rpm",
"mariadb-embedded-10.3.35-1.oe1.aarch64.rpm",
"mariadb-oqgraph-engine-10.3.35-1.oe1.aarch64.rpm",
"mariadb-server-galera-10.3.35-1.oe1.aarch64.rpm",
"mariadb-errmessage-10.3.35-1.oe1.aarch64.rpm",
"mariadb-10.3.35-1.oe1.aarch64.rpm",
"mariadb-debuginfo-10.3.35-1.oe1.aarch64.rpm",
"mariadb-devel-10.3.35-1.oe1.aarch64.rpm",
"mariadb-server-10.3.35-1.oe1.aarch64.rpm",
"mariadb-test-10.3.35-1.oe1.aarch64.rpm",
"mariadb-debugsource-10.3.35-1.oe1.aarch64.rpm",
"mariadb-gssapi-server-10.3.35-1.oe1.aarch64.rpm",
"mariadb-embedded-devel-10.3.35-1.oe1.aarch64.rpm"
],
"src": [
"mariadb-10.3.35-1.oe1.src.rpm"
],
"x86_64": [
"mariadb-10.3.35-1.oe1.x86_64.rpm",
"mariadb-cracklib-10.3.35-1.oe1.x86_64.rpm",
"mariadb-server-10.3.35-1.oe1.x86_64.rpm",
"mariadb-oqgraph-engine-10.3.35-1.oe1.x86_64.rpm",
"mariadb-gssapi-server-10.3.35-1.oe1.x86_64.rpm",
"mariadb-test-10.3.35-1.oe1.x86_64.rpm",
"mariadb-errmessage-10.3.35-1.oe1.x86_64.rpm",
"mariadb-debuginfo-10.3.35-1.oe1.x86_64.rpm",
"mariadb-devel-10.3.35-1.oe1.x86_64.rpm",
"mariadb-server-galera-10.3.35-1.oe1.x86_64.rpm",
"mariadb-backup-10.3.35-1.oe1.x86_64.rpm",
"mariadb-embedded-devel-10.3.35-1.oe1.x86_64.rpm",
"mariadb-embedded-10.3.35-1.oe1.x86_64.rpm",
"mariadb-common-10.3.35-1.oe1.x86_64.rpm",
"mariadb-debugsource-10.3.35-1.oe1.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:20.03-LTS-SP3",
"name": "mariadb",
"purl": "pkg:rpm/openEuler/mariadb\u0026distro=openEuler-20.03-LTS-SP3"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "10.3.35-1.oe1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"ecosystem_specific": {
"aarch64": [
"mariadb-config-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-test-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-backup-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-debugsource-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-embedded-devel-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-rocksdb-engine-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-server-galera-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-server-utils-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-pam-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-embedded-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-errmsg-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-server-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-debuginfo-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-devel-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-gssapi-server-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-common-10.5.16-1.oe2203.aarch64.rpm",
"mariadb-oqgraph-engine-10.5.16-1.oe2203.aarch64.rpm"
],
"src": [
"mariadb-10.5.16-1.oe2203.src.rpm"
],
"x86_64": [
"mariadb-devel-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-debuginfo-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-server-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-oqgraph-engine-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-common-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-gssapi-server-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-test-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-server-galera-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-debugsource-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-backup-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-config-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-server-utils-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-embedded-devel-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-embedded-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-errmsg-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-pam-10.5.16-1.oe2203.x86_64.rpm",
"mariadb-10.5.16-1.oe2203.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:22.03-LTS",
"name": "mariadb",
"purl": "pkg:rpm/openEuler/mariadb\u0026distro=openEuler-22.03-LTS"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "10.5.16-1.oe2203"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "High"
},
"details": "MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.\n\nSecurity Fix(es):\n\nAn issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.(CVE-2022-27379)\n\nMariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.(CVE-2022-27386)\n\nMariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.(CVE-2022-27387)\n\nAn issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.(CVE-2022-27384)\n\nAn issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.(CVE-2022-27380)\n\nMariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements.(CVE-2022-27383)\n\nAn issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.(CVE-2022-27381)\n\nMariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.(CVE-2022-27377)\n\nAn issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.(CVE-2022-27378)\n\nMariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements.(CVE-2022-27376)\n\nMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc.(CVE-2022-27452)\n\nMariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Binary_string::free_buffer() at /sql/sql_string.h.(CVE-2022-27458)\n\nMariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.(CVE-2022-27456)\n\nMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.(CVE-2022-27445)\n\nMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.(CVE-2022-27449)\n\nThere is an Assertion failure in MariaDB Server v10.9 and below via \u0026apos;node-\u0026gt;pcur-\u0026gt;rel_pos == BTR_PCUR_ON\u0026apos; at /row/row0mysql.cc.(CVE-2022-27448)\n\nMariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.(CVE-2022-27447)\n\nAn issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.(CVE-2022-27385)\n\nMariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order.(CVE-2022-27382)\n\nMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc.(CVE-2022-27451)\n\nMariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c.(CVE-2022-27457)\n\nMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h.(CVE-2022-27446)\n\nMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc.(CVE-2022-27444)\n\nMariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c.(CVE-2022-27455)",
"id": "OESA-2022-1681",
"modified": "2026-08-06T11:04:57Z",
"published": "2022-05-28T11:04:57Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1681"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27379"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27386"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27387"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27384"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27380"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27383"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27381"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27377"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27378"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27376"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27452"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27458"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27456"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27445"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27449"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27448"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27447"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27385"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27382"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27451"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27457"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27446"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27444"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27455"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
],
"summary": "mariadb security update",
"upstream": [
"CVE-2022-27379",
"CVE-2022-27386",
"CVE-2022-27387",
"CVE-2022-27384",
"CVE-2022-27380",
"CVE-2022-27383",
"CVE-2022-27381",
"CVE-2022-27377",
"CVE-2022-27378",
"CVE-2022-27376",
"CVE-2022-27452",
"CVE-2022-27458",
"CVE-2022-27456",
"CVE-2022-27445",
"CVE-2022-27449",
"CVE-2022-27448",
"CVE-2022-27447",
"CVE-2022-27385",
"CVE-2022-27382",
"CVE-2022-27451",
"CVE-2022-27457",
"CVE-2022-27446",
"CVE-2022-27444",
"CVE-2022-27455"
]
}
RHSA-2022:5759
Vulnerability from csaf_redhat - Published: 2022-07-28 16:06 - Updated: 2026-08-04 12:38A flaw was found in the MariaDB Server. It contains a use-after-free in the component, Binary_string::free_buffer() at /sql/sql_string.h, affecting availability.
RHSA-2022:6306
Vulnerability from csaf_redhat - Published: 2022-09-01 14:21 - Updated: 2026-08-04 12:38A flaw was found in the MariaDB Server. It contains a use-after-free in the component, Binary_string::free_buffer() at /sql/sql_string.h, affecting availability.
RHSA-2022_5759
Vulnerability from csaf_redhat - Published: 2022-07-28 16:06 - Updated: 2024-11-15 14:54A flaw was found in the MariaDB Server. It contains a use-after-free in the component, Binary_string::free_buffer() at /sql/sql_string.h, affecting availability.
RHSA-2022:5826
Vulnerability from csaf_opensuse - Published: 2022-08-02 00:00 - Updated: 2026-09-20 11:22RHSA-2022:5948
Vulnerability from csaf_opensuse - Published: 2022-08-09 00:00 - Updated: 2026-09-20 11:22RHSA-2022:6443
Vulnerability from csaf_opensuse - Published: 2022-09-13 00:00 - Updated: 2026-09-20 11:22Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.