Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-27387

Опубликовано: 12 апр. 2022
Источник: debian
EPSS Низкий

Описание

MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mariadb-10.6fixed1:10.6.8-1package
mariadb-10.5removedpackage
mariadb-10.5fixed1:10.5.18-0+deb11u1bullseyepackage
mariadb-10.3removedpackage
mariadb-10.1removedpackage

Примечания

  • MariaDB bug: https://jira.mariadb.org/browse/MDEV-26422

  • MariaDB main bug: https://jira.mariadb.org/browse/MDEV-25317

  • MariaDB commit: https://github.com/MariaDB/server/commit/eca207c46293bc72dd8d0d5622153fab4d3fccf1 (mariadb-10.2.44)

EPSS

Процентиль: 43%
0.00199
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 3 лет назад

MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.

CVSS3: 7.5
redhat
около 4 лет назад

MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.

CVSS3: 7.5
nvd
около 3 лет назад

MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.

CVSS3: 7.5
msrc
около 3 лет назад

Описание отсутствует

CVSS3: 7.5
github
около 3 лет назад

MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.

EPSS

Процентиль: 43%
0.00199
Низкий