Vulnerability-Lookup

usn-5739-1

Vulnerability from osv_ubuntu

Published

2022-11-23 16:27

Modified

2026-04-27 14:11

Summary

mariadb-10.3, mariadb-10.6 vulnerabilities

Details

Several security issues were discovered in MariaDB and this update includes new upstream MariaDB versions to fix these issues.

MariaDB has been updated to 10.3.37 in Ubuntu 20.04 LTS and to 10.6.11 in Ubuntu 22.04 LTS and Ubuntu 22.10.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

References

URL

Type

	https://ubuntu.com/security/notices/USN-5739-1	ADVISORY
	https://ubuntu.com/security/CVE-2018-25032	REPORT
	https://ubuntu.com/security/CVE-2021-46669	REPORT
	https://ubuntu.com/security/CVE-2022-21427	REPORT
	https://ubuntu.com/security/CVE-2022-27376	REPORT
	https://ubuntu.com/security/CVE-2022-27377	REPORT
	https://ubuntu.com/security/CVE-2022-27378	REPORT
	https://ubuntu.com/security/CVE-2022-27379	REPORT
	https://ubuntu.com/security/CVE-2022-27380	REPORT
	https://ubuntu.com/security/CVE-2022-27381	REPORT
	https://ubuntu.com/security/CVE-2022-27382	REPORT
	https://ubuntu.com/security/CVE-2022-27383	REPORT
	https://ubuntu.com/security/CVE-2022-27384	REPORT
	https://ubuntu.com/security/CVE-2022-27386	REPORT
	https://ubuntu.com/security/CVE-2022-27387	REPORT
	https://ubuntu.com/security/CVE-2022-27444	REPORT
	https://ubuntu.com/security/CVE-2022-27445	REPORT
	https://ubuntu.com/security/CVE-2022-27446	REPORT
	https://ubuntu.com/security/CVE-2022-27447	REPORT
	https://ubuntu.com/security/CVE-2022-27448	REPORT
	https://ubuntu.com/security/CVE-2022-27449	REPORT
	https://ubuntu.com/security/CVE-2022-27451	REPORT
	https://ubuntu.com/security/CVE-2022-27452	REPORT
	https://ubuntu.com/security/CVE-2022-27455	REPORT
	https://ubuntu.com/security/CVE-2022-27456	REPORT
	https://ubuntu.com/security/CVE-2022-27457	REPORT
	https://ubuntu.com/security/CVE-2022-27458	REPORT
	https://ubuntu.com/security/CVE-2022-32081	REPORT
	https://ubuntu.com/security/CVE-2022-32082	REPORT
	https://ubuntu.com/security/CVE-2022-32083	REPORT
	https://ubuntu.com/security/CVE-2022-32084	REPORT
	https://ubuntu.com/security/CVE-2022-32085	REPORT
	https://ubuntu.com/security/CVE-2022-32086	REPORT
	https://ubuntu.com/security/CVE-2022-32087	REPORT
	https://ubuntu.com/security/CVE-2022-32088	REPORT
	https://ubuntu.com/security/CVE-2022-32089	REPORT
	https://ubuntu.com/security/CVE-2022-32091	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-25032",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-46669",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-21427",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27376",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27377",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27378",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27379",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27380",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27381",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27382",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27383",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27384",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27386",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27387",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27444",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27445",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27446",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27447",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27448",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27449",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27451",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27452",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27455",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27456",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27457",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27458",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32081",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32082",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32083",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32084",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32085",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32086",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32087",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32088",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32089",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32091",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "mariadb-10.3",
        "purl": "pkg:deb/ubuntu/mariadb-10.3@1:10.3.37-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.3.37-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.3.17-1",
        "1:10.3.18-1",
        "1:10.3.19-1",
        "1:10.3.21-2",
        "1:10.3.22-1",
        "1:10.3.22-1ubuntu1",
        "1:10.3.25-0ubuntu0.20.04.1",
        "1:10.3.29-0ubuntu0.20.04.1",
        "1:10.3.30-0ubuntu0.20.04.1",
        "1:10.3.31-0ubuntu0.20.04.1",
        "1:10.3.32-0ubuntu0.20.04.1",
        "1:10.3.34-0ubuntu0.20.04.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-25032",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-46669",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-21427",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27376",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27377",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27378",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27379",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27380",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27381",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27382",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27383",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27384",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27386",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27387",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27444",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27445",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27446",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27447",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27448",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27449",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27451",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27452",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27455",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27456",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27457",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-27458",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32081",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32082",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32083",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32084",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32085",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32086",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32087",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32088",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32089",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-32091",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-s3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "mariadb-10.6",
        "purl": "pkg:deb/ubuntu/mariadb-10.6@1:10.6.11-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.6.11-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.6.7-2ubuntu1",
        "1:10.6.7-2ubuntu1.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Several security issues were discovered in MariaDB and this update\nincludes new upstream MariaDB versions to fix these issues.\n\nMariaDB has been updated to 10.3.37 in Ubuntu 20.04 LTS and to 10.6.11\nin Ubuntu 22.04 LTS and Ubuntu 22.10.\n\nIn addition to security fixes, the updated packages contain bug fixes,\nnew features, and possibly incompatible changes.\n",
  "id": "USN-5739-1",
  "modified": "2026-04-27T14:11:29Z",
  "published": "2022-11-23T16:27:18Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5739-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-25032"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-46669"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-21427"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27376"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27377"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27378"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27379"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27380"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27381"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27382"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27383"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27384"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27386"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27387"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27444"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27445"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27446"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27447"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27448"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27449"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27451"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27452"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27455"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27456"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27457"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27458"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-32081"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-32082"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-32083"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-32084"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-32085"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-32086"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-32087"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-32088"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-32089"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-32091"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "mariadb-10.3, mariadb-10.6 vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2018-25032",
    "UBUNTU-CVE-2021-46669",
    "UBUNTU-CVE-2022-21427",
    "UBUNTU-CVE-2022-27376",
    "UBUNTU-CVE-2022-27377",
    "UBUNTU-CVE-2022-27378",
    "UBUNTU-CVE-2022-27379",
    "UBUNTU-CVE-2022-27380",
    "UBUNTU-CVE-2022-27381",
    "UBUNTU-CVE-2022-27382",
    "UBUNTU-CVE-2022-27383",
    "UBUNTU-CVE-2022-27384",
    "UBUNTU-CVE-2022-27386",
    "UBUNTU-CVE-2022-27387",
    "UBUNTU-CVE-2022-27444",
    "UBUNTU-CVE-2022-27445",
    "UBUNTU-CVE-2022-27446",
    "UBUNTU-CVE-2022-27447",
    "UBUNTU-CVE-2022-27448",
    "UBUNTU-CVE-2022-27449",
    "UBUNTU-CVE-2022-27451",
    "UBUNTU-CVE-2022-27452",
    "UBUNTU-CVE-2022-27455",
    "UBUNTU-CVE-2022-27456",
    "UBUNTU-CVE-2022-27457",
    "UBUNTU-CVE-2022-27458",
    "UBUNTU-CVE-2022-32081",
    "UBUNTU-CVE-2022-32082",
    "UBUNTU-CVE-2022-32083",
    "UBUNTU-CVE-2022-32084",
    "UBUNTU-CVE-2022-32085",
    "UBUNTU-CVE-2022-32086",
    "UBUNTU-CVE-2022-32087",
    "UBUNTU-CVE-2022-32088",
    "UBUNTU-CVE-2022-32089",
    "UBUNTU-CVE-2022-32091"
  ]
}

ubuntu-cve-2018-25032

Vulnerability from osv_ubuntu

Published

2022-03-25 09:15

Modified

2026-04-22 07:38

Summary

Details

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2018-25032	REPORT
	https://www.openwall.com/lists/oss-security/2022/…	REPORT
	https://github.com/madler/zlib/issues/605	REPORT
	https://ubuntu.com/security/notices/USN-5355-1	ADVISORY
	https://ubuntu.com/security/notices/USN-5355-2	ADVISORY
	https://ubuntu.com/security/notices/USN-5359-1	ADVISORY
	https://ubuntu.com/security/notices/USN-5359-2	ADVISORY
	https://ubuntu.com/security/notices/USN-5739-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-25032	REPORT
	https://ubuntu.com/security/notices/USN-6736-1	ADVISORY
	https://ubuntu.com/security/notices/USN-6736-2	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "klibc-utils",
            "binary_version": "2.0.3-0ubuntu1.14.04.3+esm3"
          },
          {
            "binary_name": "libklibc",
            "binary_version": "2.0.3-0ubuntu1.14.04.3+esm3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "klibc",
        "purl": "pkg:deb/ubuntu/klibc@2.0.3-0ubuntu1.14.04.3+esm3?arch=source\u0026distro=trusty/esm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.3-0ubuntu1.14.04.3+esm3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.0.1-3.1ubuntu2",
        "2.0.2-1ubuntu1",
        "2.0.2-1ubuntu2",
        "2.0.3-0ubuntu1",
        "2.0.3-0ubuntu1.14.04.1",
        "2.0.3-0ubuntu1.14.04.2",
        "2.0.3-0ubuntu1.14.04.3",
        "2.0.3-0ubuntu1.14.04.3+esm2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "lib32z1",
            "binary_version": "1:1.2.8.dfsg-1ubuntu1.1+esm1"
          },
          {
            "binary_name": "lib64z1",
            "binary_version": "1:1.2.8.dfsg-1ubuntu1.1+esm1"
          },
          {
            "binary_name": "libx32z1",
            "binary_version": "1:1.2.8.dfsg-1ubuntu1.1+esm1"
          },
          {
            "binary_name": "zlib-bin",
            "binary_version": "1:1.2.8.dfsg-1ubuntu1.1+esm1"
          },
          {
            "binary_name": "zlib1g",
            "binary_version": "1:1.2.8.dfsg-1ubuntu1.1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "zlib",
        "purl": "pkg:deb/ubuntu/zlib@1:1.2.8.dfsg-1ubuntu1.1+esm1?arch=source\u0026distro=trusty/esm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:1.2.8.dfsg-1ubuntu1.1+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:1.2.8.dfsg-1ubuntu1",
        "1:1.2.8.dfsg-1ubuntu1.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "klibc-utils",
            "binary_version": "2.0.4-8ubuntu1.16.04.4+esm2"
          },
          {
            "binary_name": "libklibc",
            "binary_version": "2.0.4-8ubuntu1.16.04.4+esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "klibc",
        "purl": "pkg:deb/ubuntu/klibc@2.0.4-8ubuntu1.16.04.4+esm2?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.4-8ubuntu1.16.04.4+esm2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.0.3-0ubuntu1",
        "2.0.4-4",
        "2.0.4-6",
        "2.0.4-7",
        "2.0.4-8",
        "2.0.4-8ubuntu1",
        "2.0.4-8ubuntu1.16.04.1",
        "2.0.4-8ubuntu1.16.04.2",
        "2.0.4-8ubuntu1.16.04.3",
        "2.0.4-8ubuntu1.16.04.4",
        "2.0.4-8ubuntu1.16.04.4+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "rsync",
            "binary_version": "3.1.1-3ubuntu1.3+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "rsync",
        "purl": "pkg:deb/ubuntu/rsync@3.1.1-3ubuntu1.3+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.1.1-3ubuntu1.3+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "3.1.1-3",
        "3.1.1-3ubuntu1",
        "3.1.1-3ubuntu1.1",
        "3.1.1-3ubuntu1.2",
        "3.1.1-3ubuntu1.3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "lib32z1",
            "binary_version": "1:1.2.8.dfsg-2ubuntu4.3+esm1"
          },
          {
            "binary_name": "lib64z1",
            "binary_version": "1:1.2.8.dfsg-2ubuntu4.3+esm1"
          },
          {
            "binary_name": "libx32z1",
            "binary_version": "1:1.2.8.dfsg-2ubuntu4.3+esm1"
          },
          {
            "binary_name": "zlib1g",
            "binary_version": "1:1.2.8.dfsg-2ubuntu4.3+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "zlib",
        "purl": "pkg:deb/ubuntu/zlib@1:1.2.8.dfsg-2ubuntu4.3+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:1.2.8.dfsg-2ubuntu4.3+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:1.2.8.dfsg-2ubuntu4",
        "1:1.2.8.dfsg-2ubuntu4.1",
        "1:1.2.8.dfsg-2ubuntu4.3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "rsync",
            "binary_version": "3.1.2-2.1ubuntu1.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "rsync",
        "purl": "pkg:deb/ubuntu/rsync@3.1.2-2.1ubuntu1.4?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.1.2-2.1ubuntu1.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "3.1.2-2",
        "3.1.2-2.1",
        "3.1.2-2.1ubuntu1",
        "3.1.2-2.1ubuntu1.1",
        "3.1.2-2.1ubuntu1.2",
        "3.1.2-2.1ubuntu1.3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "lib32z1",
            "binary_version": "1:1.2.11.dfsg-0ubuntu2.1"
          },
          {
            "binary_name": "lib64z1",
            "binary_version": "1:1.2.11.dfsg-0ubuntu2.1"
          },
          {
            "binary_name": "libx32z1",
            "binary_version": "1:1.2.11.dfsg-0ubuntu2.1"
          },
          {
            "binary_name": "zlib1g",
            "binary_version": "1:1.2.11.dfsg-0ubuntu2.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "zlib",
        "purl": "pkg:deb/ubuntu/zlib@1:1.2.11.dfsg-0ubuntu2.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:1.2.11.dfsg-0ubuntu2.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:1.2.11.dfsg-0ubuntu2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "klibc-utils",
            "binary_version": "2.0.4-9ubuntu2.2+esm1"
          },
          {
            "binary_name": "libklibc",
            "binary_version": "2.0.4-9ubuntu2.2+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "klibc",
        "purl": "pkg:deb/ubuntu/klibc@2.0.4-9ubuntu2.2+esm1?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.4-9ubuntu2.2+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.0.4-9ubuntu1",
        "2.0.4-9ubuntu2",
        "2.0.4-9ubuntu2.1",
        "2.0.4-9ubuntu2.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "klibc-utils",
            "binary_version": "2.0.7-1ubuntu5.2"
          },
          {
            "binary_name": "libklibc",
            "binary_version": "2.0.7-1ubuntu5.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "klibc",
        "purl": "pkg:deb/ubuntu/klibc@2.0.7-1ubuntu5.2?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.7-1ubuntu5.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.0.6-1ubuntu1",
        "2.0.6-1ubuntu2",
        "2.0.7-1ubuntu1",
        "2.0.7-1ubuntu3",
        "2.0.7-1ubuntu4",
        "2.0.7-1ubuntu5",
        "2.0.7-1ubuntu5.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "mariadb-10.3",
        "purl": "pkg:deb/ubuntu/mariadb-10.3@1:10.3.37-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.3.37-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.3.17-1",
        "1:10.3.18-1",
        "1:10.3.19-1",
        "1:10.3.21-2",
        "1:10.3.22-1",
        "1:10.3.22-1ubuntu1",
        "1:10.3.25-0ubuntu0.20.04.1",
        "1:10.3.29-0ubuntu0.20.04.1",
        "1:10.3.30-0ubuntu0.20.04.1",
        "1:10.3.31-0ubuntu0.20.04.1",
        "1:10.3.32-0ubuntu0.20.04.1",
        "1:10.3.34-0ubuntu0.20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "rsync",
            "binary_version": "3.1.3-8ubuntu0.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "rsync",
        "purl": "pkg:deb/ubuntu/rsync@3.1.3-8ubuntu0.3?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.1.3-8ubuntu0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "3.1.3-6",
        "3.1.3-8",
        "3.1.3-8ubuntu0.1",
        "3.1.3-8ubuntu0.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "lib32z1",
            "binary_version": "1:1.2.11.dfsg-2ubuntu1.3"
          },
          {
            "binary_name": "lib64z1",
            "binary_version": "1:1.2.11.dfsg-2ubuntu1.3"
          },
          {
            "binary_name": "libx32z1",
            "binary_version": "1:1.2.11.dfsg-2ubuntu1.3"
          },
          {
            "binary_name": "zlib1g",
            "binary_version": "1:1.2.11.dfsg-2ubuntu1.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "zlib",
        "purl": "pkg:deb/ubuntu/zlib@1:1.2.11.dfsg-2ubuntu1.3?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:1.2.11.dfsg-2ubuntu1.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:1.2.11.dfsg-1ubuntu3",
        "1:1.2.11.dfsg-2ubuntu1",
        "1:1.2.11.dfsg-2ubuntu1.1",
        "1:1.2.11.dfsg-2ubuntu1.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "klibc-utils",
            "binary_version": "2.0.10-4ubuntu0.1"
          },
          {
            "binary_name": "libklibc",
            "binary_version": "2.0.10-4ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "klibc",
        "purl": "pkg:deb/ubuntu/klibc@2.0.10-4ubuntu0.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.10-4ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.0.8-6.1ubuntu2",
        "2.0.10-3",
        "2.0.10-4"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-s3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "mariadb-10.6",
        "purl": "pkg:deb/ubuntu/mariadb-10.6@1:10.6.11-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.6.11-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.6.7-2ubuntu1",
        "1:10.6.7-2ubuntu1.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "lib32z1",
            "binary_version": "1:1.2.11.dfsg-2ubuntu9"
          },
          {
            "binary_name": "lib64z1",
            "binary_version": "1:1.2.11.dfsg-2ubuntu9"
          },
          {
            "binary_name": "libx32z1",
            "binary_version": "1:1.2.11.dfsg-2ubuntu9"
          },
          {
            "binary_name": "zlib1g",
            "binary_version": "1:1.2.11.dfsg-2ubuntu9"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "zlib",
        "purl": "pkg:deb/ubuntu/zlib@1:1.2.11.dfsg-2ubuntu9?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:1.2.11.dfsg-2ubuntu9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:1.2.11.dfsg-2ubuntu7"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "klibc-utils",
            "binary_version": "2.0.13-4ubuntu0.1"
          },
          {
            "binary_name": "libklibc",
            "binary_version": "2.0.13-4ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "klibc",
        "purl": "pkg:deb/ubuntu/klibc@2.0.13-4ubuntu0.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.13-4ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.0.13-1",
        "2.0.13-2",
        "2.0.13-2ubuntu1",
        "2.0.13-4"
      ]
    }
  ],
  "aliases": [],
  "details": "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
  "id": "UBUNTU-CVE-2018-25032",
  "modified": "2026-04-22T07:38:48Z",
  "published": "2022-03-25T09:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-25032"
    },
    {
      "type": "REPORT",
      "url": "https://www.openwall.com/lists/oss-security/2022/03/24/1"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/madler/zlib/issues/605"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5355-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5355-2"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5359-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5359-2"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5739-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-25032"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6736-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6736-2"
    }
  ],
  "related": [
    "USN-5355-1",
    "USN-5355-2",
    "USN-5359-1",
    "USN-5359-2",
    "USN-5739-1",
    "USN-6736-1",
    "USN-6736-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-25032"
  ]
}

ubuntu-cve-2021-46669

Vulnerability from osv_ubuntu

Published

2022-02-01 02:15

Modified

2026-04-22 07:40

Summary

Details

MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2021-46669	REPORT
	https://jira.mariadb.org/browse/MDEV-25638	REPORT
	https://ubuntu.com/security/notices/USN-5739-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2021-46669	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "mariadb-10.3",
        "purl": "pkg:deb/ubuntu/mariadb-10.3@1:10.3.37-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.3.37-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.3.17-1",
        "1:10.3.18-1",
        "1:10.3.19-1",
        "1:10.3.21-2",
        "1:10.3.22-1",
        "1:10.3.22-1ubuntu1",
        "1:10.3.25-0ubuntu0.20.04.1",
        "1:10.3.29-0ubuntu0.20.04.1",
        "1:10.3.30-0ubuntu0.20.04.1",
        "1:10.3.31-0ubuntu0.20.04.1",
        "1:10.3.32-0ubuntu0.20.04.1",
        "1:10.3.34-0ubuntu0.20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-s3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "mariadb-10.6",
        "purl": "pkg:deb/ubuntu/mariadb-10.6@1:10.6.11-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.6.11-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.6.7-2ubuntu1",
        "1:10.6.7-2ubuntu1.1"
      ]
    }
  ],
  "aliases": [],
  "details": "MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.",
  "id": "UBUNTU-CVE-2021-46669",
  "modified": "2026-04-22T07:40:13Z",
  "published": "2022-02-01T02:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-46669"
    },
    {
      "type": "REPORT",
      "url": "https://jira.mariadb.org/browse/MDEV-25638"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5739-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-46669"
    }
  ],
  "related": [
    "USN-5739-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2021-46669"
  ]
}

ubuntu-cve-2022-21427

Vulnerability from osv_ubuntu

Published

2022-04-19 21:15

Modified

2026-04-22 07:41

Summary

Details

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Severity

4.9 (Medium)


                    
                      CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2022-21427	REPORT
	https://www.oracle.com/security-alerts/cpuapr2022.html	REPORT
	https://ubuntu.com/security/notices/USN-5400-1	ADVISORY
	https://ubuntu.com/security/notices/USN-5400-2	ADVISORY
	https://ubuntu.com/security/notices/USN-5739-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2022-21427	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmysqlclient18",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "libmysqld-pic",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-client",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-client-5.5",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-client-core-5.5",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-common",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-server",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-server-5.5",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-server-core-5.5",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-source-5.5",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-testsuite",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "mysql-testsuite-5.5",
            "binary_version": "5.5.62-0ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "mysql-5.5",
        "purl": "pkg:deb/ubuntu/mysql-5.5@5.5.62-0ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.5.32-0ubuntu7",
        "5.5.34-0ubuntu1",
        "5.5.34-0ubuntu2",
        "5.5.35-0ubuntu1",
        "5.5.35+dfsg-1ubuntu1",
        "5.5.37-0ubuntu0.14.04.1",
        "5.5.38-0ubuntu0.14.04.1",
        "5.5.40-0ubuntu0.14.04.1",
        "5.5.41-0ubuntu0.14.04.1",
        "5.5.43-0ubuntu0.14.04.1",
        "5.5.44-0ubuntu0.14.04.1",
        "5.5.46-0ubuntu0.14.04.2",
        "5.5.47-0ubuntu0.14.04.1",
        "5.5.49-0ubuntu0.14.04.1",
        "5.5.50-0ubuntu0.14.04.1",
        "5.5.52-0ubuntu0.14.04.1",
        "5.5.53-0ubuntu0.14.04.1",
        "5.5.54-0ubuntu0.14.04.1",
        "5.5.55-0ubuntu0.14.04.1",
        "5.5.57-0ubuntu0.14.04.1",
        "5.5.58-0ubuntu0.14.04.1",
        "5.5.59-0ubuntu0.14.04.1",
        "5.5.60-0ubuntu0.14.04.1",
        "5.5.61-0ubuntu0.14.04.1",
        "5.5.62-0ubuntu0.14.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "libmysqlclient20",
            "binary_version": "5.7.38-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-client",
            "binary_version": "5.7.38-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-client-5.7",
            "binary_version": "5.7.38-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-client-core-5.7",
            "binary_version": "5.7.38-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-common",
            "binary_version": "5.7.38-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-server",
            "binary_version": "5.7.38-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-server-5.7",
            "binary_version": "5.7.38-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-server-core-5.7",
            "binary_version": "5.7.38-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-source-5.7",
            "binary_version": "5.7.38-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-testsuite",
            "binary_version": "5.7.38-0ubuntu0.16.04.1+esm1"
          },
          {
            "binary_name": "mysql-testsuite-5.7",
            "binary_version": "5.7.38-0ubuntu0.16.04.1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "mysql-5.7",
        "purl": "pkg:deb/ubuntu/mysql-5.7@5.7.38-0ubuntu0.16.04.1+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.7.38-0ubuntu0.16.04.1+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.7.11-0ubuntu4",
        "5.7.11-0ubuntu5",
        "5.7.11-0ubuntu6",
        "5.7.12-0ubuntu1",
        "5.7.12-0ubuntu1.1",
        "5.7.13-0ubuntu0.16.04.2",
        "5.7.15-0ubuntu0.16.04.1",
        "5.7.16-0ubuntu0.16.04.1",
        "5.7.17-0ubuntu0.16.04.1",
        "5.7.17-0ubuntu0.16.04.2",
        "5.7.18-0ubuntu0.16.04.1",
        "5.7.19-0ubuntu0.16.04.1",
        "5.7.20-0ubuntu0.16.04.1",
        "5.7.21-0ubuntu0.16.04.1",
        "5.7.22-0ubuntu0.16.04.1",
        "5.7.23-0ubuntu0.16.04.1",
        "5.7.24-0ubuntu0.16.04.1",
        "5.7.25-0ubuntu0.16.04.2",
        "5.7.26-0ubuntu0.16.04.1",
        "5.7.27-0ubuntu0.16.04.1",
        "5.7.28-0ubuntu0.16.04.2",
        "5.7.29-0ubuntu0.16.04.1",
        "5.7.30-0ubuntu0.16.04.1",
        "5.7.31-0ubuntu0.16.04.1",
        "5.7.32-0ubuntu0.16.04.1",
        "5.7.33-0ubuntu0.16.04.1",
        "5.7.35-0ubuntu0.16.04.1+esm1",
        "5.7.36-0ubuntu0.16.04.1+esm1",
        "5.7.37-0ubuntu0.16.04.1+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbd18",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "mariadb-10.0",
        "purl": "pkg:deb/ubuntu/mariadb-10.0@10.0.38-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.0.20-0ubuntu0.15.04.1",
        "10.0.22-0ubuntu1",
        "10.0.23-1",
        "10.0.23-2",
        "10.0.24-7",
        "10.0.25-0ubuntu0.16.04.1",
        "10.0.27-0ubuntu0.16.04.1",
        "10.0.28-0ubuntu0.16.04.1",
        "10.0.29-0ubuntu0.16.04.1",
        "10.0.31-0ubuntu0.16.04.2",
        "10.0.33-0ubuntu0.16.04.1",
        "10.0.34-0ubuntu0.16.04.1",
        "10.0.36-0ubuntu0.16.04.1",
        "10.0.38-0ubuntu0.16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "percona-server-server",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-server-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-source-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-test",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          },
          {
            "binary_name": "percona-server-test-5.6",
            "binary_version": "5.6.22-rel71.0-0ubuntu4.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "percona-server-5.6",
        "purl": "pkg:deb/ubuntu/percona-server-5.6@5.6.22-rel71.0-0ubuntu4.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.6.22-rel71.0-0ubuntu2",
        "5.6.22-rel71.0-0ubuntu4",
        "5.6.22-rel71.0-0ubuntu4.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "percona-xtradb-cluster-server",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "percona-xtradb-cluster-server-5.6",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          },
          {
            "binary_name": "percona-xtradb-cluster-source-5.6",
            "binary_version": "5.6.37-26.21-0ubuntu0.16.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "percona-xtradb-cluster-5.6",
        "purl": "pkg:deb/ubuntu/percona-xtradb-cluster-5.6@5.6.37-26.21-0ubuntu0.16.04.2?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.6.21-25.8-0ubuntu2",
        "5.6.21-25.8-0ubuntu3",
        "5.6.21-25.8-0ubuntu3.1",
        "5.6.21-25.8-0ubuntu3.2",
        "5.6.34-26.19-0ubuntu0.16.04.1",
        "5.6.34-26.19-0ubuntu0.16.04.2",
        "5.6.37-26.21-0ubuntu0.16.04.1",
        "5.6.37-26.21-0ubuntu0.16.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmysqlclient20",
            "binary_version": "5.7.38-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mysql-client",
            "binary_version": "5.7.38-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mysql-client-5.7",
            "binary_version": "5.7.38-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mysql-client-core-5.7",
            "binary_version": "5.7.38-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mysql-server",
            "binary_version": "5.7.38-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mysql-server-5.7",
            "binary_version": "5.7.38-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mysql-server-core-5.7",
            "binary_version": "5.7.38-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mysql-source-5.7",
            "binary_version": "5.7.38-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mysql-testsuite",
            "binary_version": "5.7.38-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mysql-testsuite-5.7",
            "binary_version": "5.7.38-0ubuntu0.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "mysql-5.7",
        "purl": "pkg:deb/ubuntu/mysql-5.7@5.7.38-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.7.38-0ubuntu0.18.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.7.19-0ubuntu1",
        "5.7.20-0ubuntu0.17.10.1",
        "5.7.20-1ubuntu1",
        "5.7.21-1ubuntu1",
        "5.7.22-0ubuntu18.04.1",
        "5.7.23-0ubuntu0.18.04.1",
        "5.7.24-0ubuntu0.18.04.1",
        "5.7.25-0ubuntu0.18.04.2",
        "5.7.26-0ubuntu0.18.04.1",
        "5.7.27-0ubuntu0.18.04.1",
        "5.7.28-0ubuntu0.18.04.4",
        "5.7.29-0ubuntu0.18.04.1",
        "5.7.30-0ubuntu0.18.04.1",
        "5.7.31-0ubuntu0.18.04.1",
        "5.7.32-0ubuntu0.18.04.1",
        "5.7.33-0ubuntu0.18.04.1",
        "5.7.34-0ubuntu0.18.04.1",
        "5.7.35-0ubuntu0.18.04.1",
        "5.7.35-0ubuntu0.18.04.2",
        "5.7.36-0ubuntu0.18.04.1",
        "5.7.37-0ubuntu0.18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbclient-dev-compat",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbclient18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbd18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "mariadb-10.1",
        "purl": "pkg:deb/ubuntu/mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.1.25-1",
        "1:10.1.29-6",
        "1:10.1.34-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.2",
        "1:10.1.40-0ubuntu0.18.04.1",
        "1:10.1.41-0ubuntu0.18.04.1",
        "1:10.1.43-0ubuntu0.18.04.1",
        "1:10.1.44-0ubuntu0.18.04.1",
        "1:10.1.47-0ubuntu0.18.04.1",
        "1:10.1.48-0ubuntu0.18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "mariadb-10.3",
        "purl": "pkg:deb/ubuntu/mariadb-10.3@1:10.3.37-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.3.37-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.3.17-1",
        "1:10.3.18-1",
        "1:10.3.19-1",
        "1:10.3.21-2",
        "1:10.3.22-1",
        "1:10.3.22-1ubuntu1",
        "1:10.3.25-0ubuntu0.20.04.1",
        "1:10.3.29-0ubuntu0.20.04.1",
        "1:10.3.30-0ubuntu0.20.04.1",
        "1:10.3.31-0ubuntu0.20.04.1",
        "1:10.3.32-0ubuntu0.20.04.1",
        "1:10.3.34-0ubuntu0.20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmysqlclient21",
            "binary_version": "8.0.29-0ubuntu0.20.04.2"
          },
          {
            "binary_name": "mysql-client",
            "binary_version": "8.0.29-0ubuntu0.20.04.2"
          },
          {
            "binary_name": "mysql-client-8.0",
            "binary_version": "8.0.29-0ubuntu0.20.04.2"
          },
          {
            "binary_name": "mysql-client-core-8.0",
            "binary_version": "8.0.29-0ubuntu0.20.04.2"
          },
          {
            "binary_name": "mysql-router",
            "binary_version": "8.0.29-0ubuntu0.20.04.2"
          },
          {
            "binary_name": "mysql-server",
            "binary_version": "8.0.29-0ubuntu0.20.04.2"
          },
          {
            "binary_name": "mysql-server-8.0",
            "binary_version": "8.0.29-0ubuntu0.20.04.2"
          },
          {
            "binary_name": "mysql-server-core-8.0",
            "binary_version": "8.0.29-0ubuntu0.20.04.2"
          },
          {
            "binary_name": "mysql-source-8.0",
            "binary_version": "8.0.29-0ubuntu0.20.04.2"
          },
          {
            "binary_name": "mysql-testsuite",
            "binary_version": "8.0.29-0ubuntu0.20.04.2"
          },
          {
            "binary_name": "mysql-testsuite-8.0",
            "binary_version": "8.0.29-0ubuntu0.20.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "mysql-8.0",
        "purl": "pkg:deb/ubuntu/mysql-8.0@8.0.29-0ubuntu0.20.04.2?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.29-0ubuntu0.20.04.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "8.0.17-0ubuntu2",
        "8.0.17-0ubuntu3",
        "8.0.18-0ubuntu3",
        "8.0.18-0ubuntu4",
        "8.0.18-0ubuntu5",
        "8.0.19-0ubuntu2",
        "8.0.19-0ubuntu3",
        "8.0.19-0ubuntu4",
        "8.0.19-0ubuntu5",
        "8.0.20-0ubuntu0.20.04.1",
        "8.0.21-0ubuntu0.20.04.3",
        "8.0.21-0ubuntu0.20.04.4",
        "8.0.22-0ubuntu0.20.04.2",
        "8.0.22-0ubuntu0.20.04.3",
        "8.0.23-0ubuntu0.20.04.1",
        "8.0.25-0ubuntu0.20.04.1",
        "8.0.26-0ubuntu0.20.04.2",
        "8.0.26-0ubuntu0.20.04.3",
        "8.0.27-0ubuntu0.20.04.1",
        "8.0.28-0ubuntu0.20.04.3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-s3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "mariadb-10.6",
        "purl": "pkg:deb/ubuntu/mariadb-10.6@1:10.6.11-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.6.11-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.6.7-2ubuntu1",
        "1:10.6.7-2ubuntu1.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmysqlclient21",
            "binary_version": "8.0.29-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mysql-client",
            "binary_version": "8.0.29-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mysql-client-8.0",
            "binary_version": "8.0.29-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mysql-client-core-8.0",
            "binary_version": "8.0.29-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mysql-router",
            "binary_version": "8.0.29-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mysql-server",
            "binary_version": "8.0.29-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mysql-server-8.0",
            "binary_version": "8.0.29-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mysql-server-core-8.0",
            "binary_version": "8.0.29-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mysql-source-8.0",
            "binary_version": "8.0.29-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mysql-testsuite",
            "binary_version": "8.0.29-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mysql-testsuite-8.0",
            "binary_version": "8.0.29-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "mysql-8.0",
        "purl": "pkg:deb/ubuntu/mysql-8.0@8.0.29-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.29-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "8.0.26-0ubuntu1",
        "8.0.27-0ubuntu0.21.10.1",
        "8.0.28-0ubuntu3",
        "8.0.28-0ubuntu4"
      ]
    }
  ],
  "aliases": [],
  "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
  "id": "UBUNTU-CVE-2022-21427",
  "modified": "2026-04-22T07:41:27Z",
  "published": "2022-04-19T21:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-21427"
    },
    {
      "type": "REPORT",
      "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5400-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5400-2"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5739-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21427"
    }
  ],
  "related": [
    "USN-5400-1",
    "USN-5400-2",
    "USN-5739-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2022-21427"
  ]
}

ubuntu-cve-2022-27376

Vulnerability from osv_ubuntu

Published

2022-04-12 20:15

Modified

2026-04-22 07:41

Summary

Details

MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2022-27376	REPORT
	https://jira.mariadb.org/browse/MDEV-26354	REPORT
	https://ubuntu.com/security/notices/USN-5739-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2022-27376	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbd18",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "mariadb-10.0",
        "purl": "pkg:deb/ubuntu/mariadb-10.0@10.0.38-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.0.20-0ubuntu0.15.04.1",
        "10.0.22-0ubuntu1",
        "10.0.23-1",
        "10.0.23-2",
        "10.0.24-7",
        "10.0.25-0ubuntu0.16.04.1",
        "10.0.27-0ubuntu0.16.04.1",
        "10.0.28-0ubuntu0.16.04.1",
        "10.0.29-0ubuntu0.16.04.1",
        "10.0.31-0ubuntu0.16.04.2",
        "10.0.33-0ubuntu0.16.04.1",
        "10.0.34-0ubuntu0.16.04.1",
        "10.0.36-0ubuntu0.16.04.1",
        "10.0.38-0ubuntu0.16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbclient-dev-compat",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbclient18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbd18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "mariadb-10.1",
        "purl": "pkg:deb/ubuntu/mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.1.25-1",
        "1:10.1.29-6",
        "1:10.1.34-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.2",
        "1:10.1.40-0ubuntu0.18.04.1",
        "1:10.1.41-0ubuntu0.18.04.1",
        "1:10.1.43-0ubuntu0.18.04.1",
        "1:10.1.44-0ubuntu0.18.04.1",
        "1:10.1.47-0ubuntu0.18.04.1",
        "1:10.1.48-0ubuntu0.18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "mariadb-10.3",
        "purl": "pkg:deb/ubuntu/mariadb-10.3@1:10.3.37-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.3.37-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.3.17-1",
        "1:10.3.18-1",
        "1:10.3.19-1",
        "1:10.3.21-2",
        "1:10.3.22-1",
        "1:10.3.22-1ubuntu1",
        "1:10.3.25-0ubuntu0.20.04.1",
        "1:10.3.29-0ubuntu0.20.04.1",
        "1:10.3.30-0ubuntu0.20.04.1",
        "1:10.3.31-0ubuntu0.20.04.1",
        "1:10.3.32-0ubuntu0.20.04.1",
        "1:10.3.34-0ubuntu0.20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-s3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "mariadb-10.6",
        "purl": "pkg:deb/ubuntu/mariadb-10.6@1:10.6.11-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.6.11-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.6.7-2ubuntu1",
        "1:10.6.7-2ubuntu1.1"
      ]
    }
  ],
  "aliases": [],
  "details": "MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements.",
  "id": "UBUNTU-CVE-2022-27376",
  "modified": "2026-04-22T07:41:32Z",
  "published": "2022-04-12T20:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27376"
    },
    {
      "type": "REPORT",
      "url": "https://jira.mariadb.org/browse/MDEV-26354"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5739-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27376"
    }
  ],
  "related": [
    "USN-5739-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2022-27376"
  ]
}

ubuntu-cve-2022-27377

Vulnerability from osv_ubuntu

Published

2022-04-12 20:15

Modified

2026-04-22 07:41

Summary

Details

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2022-27377	REPORT
	https://jira.mariadb.org/browse/MDEV-26281	REPORT
	https://ubuntu.com/security/notices/USN-5739-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2022-27377	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbd18",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "mariadb-10.0",
        "purl": "pkg:deb/ubuntu/mariadb-10.0@10.0.38-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.0.20-0ubuntu0.15.04.1",
        "10.0.22-0ubuntu1",
        "10.0.23-1",
        "10.0.23-2",
        "10.0.24-7",
        "10.0.25-0ubuntu0.16.04.1",
        "10.0.27-0ubuntu0.16.04.1",
        "10.0.28-0ubuntu0.16.04.1",
        "10.0.29-0ubuntu0.16.04.1",
        "10.0.31-0ubuntu0.16.04.2",
        "10.0.33-0ubuntu0.16.04.1",
        "10.0.34-0ubuntu0.16.04.1",
        "10.0.36-0ubuntu0.16.04.1",
        "10.0.38-0ubuntu0.16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbclient-dev-compat",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbclient18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbd18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "mariadb-10.1",
        "purl": "pkg:deb/ubuntu/mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.1.25-1",
        "1:10.1.29-6",
        "1:10.1.34-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.2",
        "1:10.1.40-0ubuntu0.18.04.1",
        "1:10.1.41-0ubuntu0.18.04.1",
        "1:10.1.43-0ubuntu0.18.04.1",
        "1:10.1.44-0ubuntu0.18.04.1",
        "1:10.1.47-0ubuntu0.18.04.1",
        "1:10.1.48-0ubuntu0.18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "mariadb-10.3",
        "purl": "pkg:deb/ubuntu/mariadb-10.3@1:10.3.37-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.3.37-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.3.17-1",
        "1:10.3.18-1",
        "1:10.3.19-1",
        "1:10.3.21-2",
        "1:10.3.22-1",
        "1:10.3.22-1ubuntu1",
        "1:10.3.25-0ubuntu0.20.04.1",
        "1:10.3.29-0ubuntu0.20.04.1",
        "1:10.3.30-0ubuntu0.20.04.1",
        "1:10.3.31-0ubuntu0.20.04.1",
        "1:10.3.32-0ubuntu0.20.04.1",
        "1:10.3.34-0ubuntu0.20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-s3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "mariadb-10.6",
        "purl": "pkg:deb/ubuntu/mariadb-10.6@1:10.6.11-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.6.11-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.6.7-2ubuntu1",
        "1:10.6.7-2ubuntu1.1"
      ]
    }
  ],
  "aliases": [],
  "details": "MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.",
  "id": "UBUNTU-CVE-2022-27377",
  "modified": "2026-04-22T07:41:32Z",
  "published": "2022-04-12T20:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27377"
    },
    {
      "type": "REPORT",
      "url": "https://jira.mariadb.org/browse/MDEV-26281"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5739-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27377"
    }
  ],
  "related": [
    "USN-5739-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2022-27377"
  ]
}

ubuntu-cve-2022-27378

Vulnerability from osv_ubuntu

Published

2022-04-12 20:15

Modified

2026-04-22 07:41

Summary

Details

An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2022-27378	REPORT
	https://jira.mariadb.org/browse/MDEV-26423	REPORT
	https://ubuntu.com/security/notices/USN-5739-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2022-27378	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbd18",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "mariadb-10.0",
        "purl": "pkg:deb/ubuntu/mariadb-10.0@10.0.38-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.0.20-0ubuntu0.15.04.1",
        "10.0.22-0ubuntu1",
        "10.0.23-1",
        "10.0.23-2",
        "10.0.24-7",
        "10.0.25-0ubuntu0.16.04.1",
        "10.0.27-0ubuntu0.16.04.1",
        "10.0.28-0ubuntu0.16.04.1",
        "10.0.29-0ubuntu0.16.04.1",
        "10.0.31-0ubuntu0.16.04.2",
        "10.0.33-0ubuntu0.16.04.1",
        "10.0.34-0ubuntu0.16.04.1",
        "10.0.36-0ubuntu0.16.04.1",
        "10.0.38-0ubuntu0.16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbclient-dev-compat",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbclient18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbd18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "mariadb-10.1",
        "purl": "pkg:deb/ubuntu/mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.1.25-1",
        "1:10.1.29-6",
        "1:10.1.34-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.2",
        "1:10.1.40-0ubuntu0.18.04.1",
        "1:10.1.41-0ubuntu0.18.04.1",
        "1:10.1.43-0ubuntu0.18.04.1",
        "1:10.1.44-0ubuntu0.18.04.1",
        "1:10.1.47-0ubuntu0.18.04.1",
        "1:10.1.48-0ubuntu0.18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "mariadb-10.3",
        "purl": "pkg:deb/ubuntu/mariadb-10.3@1:10.3.37-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.3.37-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.3.17-1",
        "1:10.3.18-1",
        "1:10.3.19-1",
        "1:10.3.21-2",
        "1:10.3.22-1",
        "1:10.3.22-1ubuntu1",
        "1:10.3.25-0ubuntu0.20.04.1",
        "1:10.3.29-0ubuntu0.20.04.1",
        "1:10.3.30-0ubuntu0.20.04.1",
        "1:10.3.31-0ubuntu0.20.04.1",
        "1:10.3.32-0ubuntu0.20.04.1",
        "1:10.3.34-0ubuntu0.20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-s3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "mariadb-10.6",
        "purl": "pkg:deb/ubuntu/mariadb-10.6@1:10.6.11-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.6.11-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.6.7-2ubuntu1",
        "1:10.6.7-2ubuntu1.1"
      ]
    }
  ],
  "aliases": [],
  "details": "An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.",
  "id": "UBUNTU-CVE-2022-27378",
  "modified": "2026-04-22T07:41:32Z",
  "published": "2022-04-12T20:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27378"
    },
    {
      "type": "REPORT",
      "url": "https://jira.mariadb.org/browse/MDEV-26423"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5739-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27378"
    }
  ],
  "related": [
    "USN-5739-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2022-27378"
  ]
}

ubuntu-cve-2022-27379

Vulnerability from osv_ubuntu

Published

2022-04-12 20:15

Modified

2026-04-22 07:41

Summary

Details

An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2022-27379	REPORT
	https://jira.mariadb.org/browse/MDEV-26353	REPORT
	https://ubuntu.com/security/notices/USN-5739-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2022-27379	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbd18",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "mariadb-10.0",
        "purl": "pkg:deb/ubuntu/mariadb-10.0@10.0.38-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.0.20-0ubuntu0.15.04.1",
        "10.0.22-0ubuntu1",
        "10.0.23-1",
        "10.0.23-2",
        "10.0.24-7",
        "10.0.25-0ubuntu0.16.04.1",
        "10.0.27-0ubuntu0.16.04.1",
        "10.0.28-0ubuntu0.16.04.1",
        "10.0.29-0ubuntu0.16.04.1",
        "10.0.31-0ubuntu0.16.04.2",
        "10.0.33-0ubuntu0.16.04.1",
        "10.0.34-0ubuntu0.16.04.1",
        "10.0.36-0ubuntu0.16.04.1",
        "10.0.38-0ubuntu0.16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbclient-dev-compat",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbclient18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbd18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "mariadb-10.1",
        "purl": "pkg:deb/ubuntu/mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.1.25-1",
        "1:10.1.29-6",
        "1:10.1.34-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.2",
        "1:10.1.40-0ubuntu0.18.04.1",
        "1:10.1.41-0ubuntu0.18.04.1",
        "1:10.1.43-0ubuntu0.18.04.1",
        "1:10.1.44-0ubuntu0.18.04.1",
        "1:10.1.47-0ubuntu0.18.04.1",
        "1:10.1.48-0ubuntu0.18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "mariadb-10.3",
        "purl": "pkg:deb/ubuntu/mariadb-10.3@1:10.3.37-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.3.37-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.3.17-1",
        "1:10.3.18-1",
        "1:10.3.19-1",
        "1:10.3.21-2",
        "1:10.3.22-1",
        "1:10.3.22-1ubuntu1",
        "1:10.3.25-0ubuntu0.20.04.1",
        "1:10.3.29-0ubuntu0.20.04.1",
        "1:10.3.30-0ubuntu0.20.04.1",
        "1:10.3.31-0ubuntu0.20.04.1",
        "1:10.3.32-0ubuntu0.20.04.1",
        "1:10.3.34-0ubuntu0.20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-s3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "mariadb-10.6",
        "purl": "pkg:deb/ubuntu/mariadb-10.6@1:10.6.11-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.6.11-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.6.7-2ubuntu1",
        "1:10.6.7-2ubuntu1.1"
      ]
    }
  ],
  "aliases": [],
  "details": "An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.",
  "id": "UBUNTU-CVE-2022-27379",
  "modified": "2026-04-22T07:41:32Z",
  "published": "2022-04-12T20:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27379"
    },
    {
      "type": "REPORT",
      "url": "https://jira.mariadb.org/browse/MDEV-26353"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5739-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27379"
    }
  ],
  "related": [
    "USN-5739-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2022-27379"
  ]
}

ubuntu-cve-2022-27380

Vulnerability from osv_ubuntu

Published

2022-04-12 20:15

Modified

2026-04-22 07:41

Summary

Details

An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2022-27380	REPORT
	https://jira.mariadb.org/browse/MDEV-26280	REPORT
	https://ubuntu.com/security/notices/USN-5739-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2022-27380	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbd18",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "mariadb-10.0",
        "purl": "pkg:deb/ubuntu/mariadb-10.0@10.0.38-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.0.20-0ubuntu0.15.04.1",
        "10.0.22-0ubuntu1",
        "10.0.23-1",
        "10.0.23-2",
        "10.0.24-7",
        "10.0.25-0ubuntu0.16.04.1",
        "10.0.27-0ubuntu0.16.04.1",
        "10.0.28-0ubuntu0.16.04.1",
        "10.0.29-0ubuntu0.16.04.1",
        "10.0.31-0ubuntu0.16.04.2",
        "10.0.33-0ubuntu0.16.04.1",
        "10.0.34-0ubuntu0.16.04.1",
        "10.0.36-0ubuntu0.16.04.1",
        "10.0.38-0ubuntu0.16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbclient-dev-compat",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbclient18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbd18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "mariadb-10.1",
        "purl": "pkg:deb/ubuntu/mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.1.25-1",
        "1:10.1.29-6",
        "1:10.1.34-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.2",
        "1:10.1.40-0ubuntu0.18.04.1",
        "1:10.1.41-0ubuntu0.18.04.1",
        "1:10.1.43-0ubuntu0.18.04.1",
        "1:10.1.44-0ubuntu0.18.04.1",
        "1:10.1.47-0ubuntu0.18.04.1",
        "1:10.1.48-0ubuntu0.18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "mariadb-10.3",
        "purl": "pkg:deb/ubuntu/mariadb-10.3@1:10.3.37-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.3.37-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.3.17-1",
        "1:10.3.18-1",
        "1:10.3.19-1",
        "1:10.3.21-2",
        "1:10.3.22-1",
        "1:10.3.22-1ubuntu1",
        "1:10.3.25-0ubuntu0.20.04.1",
        "1:10.3.29-0ubuntu0.20.04.1",
        "1:10.3.30-0ubuntu0.20.04.1",
        "1:10.3.31-0ubuntu0.20.04.1",
        "1:10.3.32-0ubuntu0.20.04.1",
        "1:10.3.34-0ubuntu0.20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-s3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "mariadb-10.6",
        "purl": "pkg:deb/ubuntu/mariadb-10.6@1:10.6.11-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.6.11-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.6.7-2ubuntu1",
        "1:10.6.7-2ubuntu1.1"
      ]
    }
  ],
  "aliases": [],
  "details": "An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.",
  "id": "UBUNTU-CVE-2022-27380",
  "modified": "2026-04-22T07:41:32Z",
  "published": "2022-04-12T20:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27380"
    },
    {
      "type": "REPORT",
      "url": "https://jira.mariadb.org/browse/MDEV-26280"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5739-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27380"
    }
  ],
  "related": [
    "USN-5739-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2022-27380"
  ]
}

ubuntu-cve-2022-27381

Vulnerability from osv_ubuntu

Published

2022-04-12 20:15

Modified

2026-04-22 07:41

Summary

Details

An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2022-27381	REPORT
	https://jira.mariadb.org/browse/MDEV-26061	REPORT
	https://ubuntu.com/security/notices/USN-5739-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2022-27381	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbd18",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "mariadb-10.0",
        "purl": "pkg:deb/ubuntu/mariadb-10.0@10.0.38-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.0.20-0ubuntu0.15.04.1",
        "10.0.22-0ubuntu1",
        "10.0.23-1",
        "10.0.23-2",
        "10.0.24-7",
        "10.0.25-0ubuntu0.16.04.1",
        "10.0.27-0ubuntu0.16.04.1",
        "10.0.28-0ubuntu0.16.04.1",
        "10.0.29-0ubuntu0.16.04.1",
        "10.0.31-0ubuntu0.16.04.2",
        "10.0.33-0ubuntu0.16.04.1",
        "10.0.34-0ubuntu0.16.04.1",
        "10.0.36-0ubuntu0.16.04.1",
        "10.0.38-0ubuntu0.16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbclient-dev-compat",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbclient18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbd18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "mariadb-10.1",
        "purl": "pkg:deb/ubuntu/mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.1.25-1",
        "1:10.1.29-6",
        "1:10.1.34-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.2",
        "1:10.1.40-0ubuntu0.18.04.1",
        "1:10.1.41-0ubuntu0.18.04.1",
        "1:10.1.43-0ubuntu0.18.04.1",
        "1:10.1.44-0ubuntu0.18.04.1",
        "1:10.1.47-0ubuntu0.18.04.1",
        "1:10.1.48-0ubuntu0.18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "mariadb-10.3",
        "purl": "pkg:deb/ubuntu/mariadb-10.3@1:10.3.37-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.3.37-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.3.17-1",
        "1:10.3.18-1",
        "1:10.3.19-1",
        "1:10.3.21-2",
        "1:10.3.22-1",
        "1:10.3.22-1ubuntu1",
        "1:10.3.25-0ubuntu0.20.04.1",
        "1:10.3.29-0ubuntu0.20.04.1",
        "1:10.3.30-0ubuntu0.20.04.1",
        "1:10.3.31-0ubuntu0.20.04.1",
        "1:10.3.32-0ubuntu0.20.04.1",
        "1:10.3.34-0ubuntu0.20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-s3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "mariadb-10.6",
        "purl": "pkg:deb/ubuntu/mariadb-10.6@1:10.6.11-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.6.11-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.6.7-2ubuntu1",
        "1:10.6.7-2ubuntu1.1"
      ]
    }
  ],
  "aliases": [],
  "details": "An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.",
  "id": "UBUNTU-CVE-2022-27381",
  "modified": "2026-04-22T07:41:32Z",
  "published": "2022-04-12T20:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27381"
    },
    {
      "type": "REPORT",
      "url": "https://jira.mariadb.org/browse/MDEV-26061"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5739-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27381"
    }
  ],
  "related": [
    "USN-5739-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2022-27381"
  ]
}

ubuntu-cve-2022-27382

Vulnerability from osv_ubuntu

Published

2022-04-12 20:15

Modified

2026-04-22 07:41

Summary

Details

MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2022-27382	REPORT
	https://jira.mariadb.org/browse/MDEV-26402	REPORT
	https://ubuntu.com/security/notices/USN-5739-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2022-27382	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbd18",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.0",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "10.0.38-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "mariadb-10.0",
        "purl": "pkg:deb/ubuntu/mariadb-10.0@10.0.38-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.0.20-0ubuntu0.15.04.1",
        "10.0.22-0ubuntu1",
        "10.0.23-1",
        "10.0.23-2",
        "10.0.24-7",
        "10.0.25-0ubuntu0.16.04.1",
        "10.0.27-0ubuntu0.16.04.1",
        "10.0.28-0ubuntu0.16.04.1",
        "10.0.29-0ubuntu0.16.04.1",
        "10.0.31-0ubuntu0.16.04.2",
        "10.0.33-0ubuntu0.16.04.1",
        "10.0.34-0ubuntu0.16.04.1",
        "10.0.36-0ubuntu0.16.04.1",
        "10.0.38-0ubuntu0.16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libmariadbclient-dev-compat",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbclient18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "libmariadbd18",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.1",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.1.48-0ubuntu0.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "mariadb-10.1",
        "purl": "pkg:deb/ubuntu/mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.1.25-1",
        "1:10.1.29-6",
        "1:10.1.34-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.1",
        "1:10.1.38-0ubuntu0.18.04.2",
        "1:10.1.40-0ubuntu0.18.04.1",
        "1:10.1.41-0ubuntu0.18.04.1",
        "1:10.1.43-0ubuntu0.18.04.1",
        "1:10.1.44-0ubuntu0.18.04.1",
        "1:10.1.47-0ubuntu0.18.04.1",
        "1:10.1.48-0ubuntu0.18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-plugin-tokudb",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.3",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.3.37-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "mariadb-10.3",
        "purl": "pkg:deb/ubuntu/mariadb-10.3@1:10.3.37-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.3.37-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.3.17-1",
        "1:10.3.18-1",
        "1:10.3.19-1",
        "1:10.3.21-2",
        "1:10.3.22-1",
        "1:10.3.22-1ubuntu1",
        "1:10.3.25-0ubuntu0.20.04.1",
        "1:10.3.29-0ubuntu0.20.04.1",
        "1:10.3.30-0ubuntu0.20.04.1",
        "1:10.3.31-0ubuntu0.20.04.1",
        "1:10.3.32-0ubuntu0.20.04.1",
        "1:10.3.34-0ubuntu0.20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libmariadb-dev-compat",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadb3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "libmariadbd19",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-backup",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-client-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-common",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-connect",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-cracklib-password-check",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-client",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-gssapi-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-mroonga",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-oqgraph",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-rocksdb",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-s3",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-plugin-spider",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-server-core-10.6",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "mariadb-test-data",
            "binary_version": "1:10.6.11-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "mariadb-10.6",
        "purl": "pkg:deb/ubuntu/mariadb-10.6@1:10.6.11-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.6.11-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.6.7-2ubuntu1",
        "1:10.6.7-2ubuntu1.1"
      ]
    }
  ],
  "aliases": [],
  "details": "MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order.",
  "id": "UBUNTU-CVE-2022-27382",
  "modified": "2026-04-22T07:41:32Z",
  "published": "2022-04-12T20:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27382"
    },
    {
      "type": "REPORT",
      "url": "https://jira.mariadb.org/browse/MDEV-26402"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5739-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27382"
    }
  ],
  "related": [
    "USN-5739-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2022-27382"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature