CVE-2022-27385
Summary
| CVE | CVE-2022-27385 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-04-12 20:15:00 UTC |
| Updated | 2022-06-07 13:38:00 UTC |
| Description | An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. |
Risk And Classification
Problem Types: CWE-89
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| CVE-2022-27385 MariaDB Vulnerability in NetApp Products | NetApp Product Security | CONFIRM | security.netapp.com | |
| [MDEV-26415] MariaDB server crash in Used_tables_and_const_cache::used_tables_and_const_cache_join - Jira | MISC | jira.mariadb.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 184384 Debian Security Update for mariadb-10.5 (CVE-2022-27385)
- 240384 Red Hat Update for mariadb:10.3 (RHSA-2022:4818)
- 354476 Amazon Linux Security Advisory for mariadb105 : ALAS2022-2022-182
- 355152 Amazon Linux Security Advisory for mariadb105 : ALAS2023-2023-037
- 356265 Amazon Linux Security Advisory for mariadb : ALASMARIADB10.5-2023-003
- 502457 Alpine Linux Security Update for mariadb
- 504147 Alpine Linux Security Update for mariadb
- 672043 EulerOS Security Update for mariadb (EulerOS-SA-2022-2227)
- 900825 Common Base Linux Mariner (CBL-Mariner) Security Update for mariadb (9390)
- 901710 Common Base Linux Mariner (CBL-Mariner) Security Update for mariadb (9359)
- 902182 Common Base Linux Mariner (CBL-Mariner) Security Update for mariadb (9390-1)
- 903852 Common Base Linux Mariner (CBL-Mariner) Security Update for mariadb (9359-1)
- 960353 Rocky Linux Security Update for mariadb:10.5 (RLSA-2022:1557)
- 960427 Rocky Linux Security Update for mariadb:10.3 (RLSA-2022:1556)