CVE-2022-32084

Опубликовано: 01 июл. 2022

Источник: debian

EPSS Низкий

Описание

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.

Пакет	Статус	Версия исправления	Релиз	Тип
mariadb-10.6	fixed	1:10.6.9-1		package
mariadb-10.5	removed			package
mariadb-10.5	fixed	1:10.5.18-0+deb11u1	bullseye	package
mariadb-10.3	removed			package

https://jira.mariadb.org/browse/MDEV-26427
Fixed in 10.3.36, 10.4.26, 10.5.17, 10.6.9, 10.7.5, 10.8.4, 10.9.2
Fixed by: https://github.com/MariaDB/server/commit/49e14000eeb245ea27e9207d2f63cb0a28be1ca9 (mariadb-10.3.36)
Affect windows function introduced in 10.2 see https://mariadb.com/kb/en/changes-improvements-in-mariadb-10-2/

EPSS

Процентиль: 44%

0.00211

Низкий

CVE-2022-32084

CVSS3: 7.5

ubuntu

почти 3 года назад

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.

CVE-2022-32084

CVSS3: 6.5

redhat

почти 4 года назад

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.

CVE-2022-32084

CVSS3: 7.5

nvd

почти 3 года назад

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.

SUSE-SU-2023:3174-1

suse-cvrf

почти 2 года назад

Security update for mariadb

SUSE-SU-2023:2835-1

suse-cvrf

почти 2 года назад

Security update for mariadb

EPSS

Процентиль: 44%

0.00211

Низкий