CVE-2022-32089

HIGH

MariaDB <10.8 - Memory Corruption

Title source: llm

Description

MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level.

References (5)

[Exploit, Issue Tracking, Third Party Advisory] https://jira.mariadb.org/browse/MDEV-26410

[Third Party Advisory] https://security.netapp.com/advisory/ntap-20220818-0005/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCOEGSVMIEXDZHBOSV6WVF7FAVRBR2JE/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTVAONAZXJFGHAJ4RP2OF3EAMQCOTDSQ/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY/

Scores

CVSS v3 7.5

EPSS 0.0012

EPSS Percentile 31.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

Status published

Affected Products (4)

mariadb/mariadb < 10.4.26

fedoraproject/fedora

fedoraproject/fedora

fedoraproject/fedora

Timeline

Published Jul 01, 2022

Tracked Since Feb 18, 2026