Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-27445

Опубликовано: 14 апр. 2022
Источник: debian
EPSS Низкий

Описание

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mariadb-10.6fixed1:10.6.8-1package
mariadb-10.5removedpackage
mariadb-10.5fixed1:10.5.18-0+deb11u1bullseyepackage
mariadb-10.3removedpackage
mariadb-10.1not-affectedpackage

Примечания

  • MariaDB bug: https://jira.mariadb.org/browse/MDEV-28081

  • MariaDB main bug: https://jira.mariadb.org/browse/MDEV-19398

  • MariaDB commit [1/2] https://github.com/MariaDB/server/commit/ba4927e520190bbad763bb5260ae154f29a61231 (mariadb-10.2.44)

  • MariaDB commit [2/2] https://github.com/MariaDB/server/commit/624cb9735e737ca3392957e2db2171c2957cf282 (mariadb-10.2.44)

  • Fixed in MariaDB 10.2.44, 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4, 10.8.3

  • Changelog for 10.2 introducing windows function: https://mariadb.com/kb/en/mariadb-1020-release-notes/

EPSS

Процентиль: 49%
0.00253
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 3 лет назад

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.

CVSS3: 7.5
redhat
около 6 лет назад

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.

CVSS3: 7.5
nvd
около 3 лет назад

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.

CVSS3: 7.5
msrc
около 3 лет назад

Описание отсутствует

CVSS3: 7.5
github
около 3 лет назад

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.

EPSS

Процентиль: 49%
0.00253
Низкий