CVE-2022-32086

Description

MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.105

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in MariaDB 10.7.3Windows
Multiple vulnerabilities fixed in MariaDB MariaDB 10.7.4Windows
Multiple vulnerabilities fixed in MariaDB MariaDB 10.6.8Windows
Multiple vulnerabilities fixed in MariaDB MariaDB 10.5.16Windows
Multiple vulnerabilities fixed in MariaDB MariaDB 10.4.25Windows
MariaDB database (USN-5739-1) mariadb-server_10.3.37-0ubuntu0.20.04.1_all.debLinux
MariaDB database (USN-5739-1) mariadb-server_10.6.11-0ubuntu0.22.04.1_all.debLinux
MariaDB database (USN-5739-1) mariadb-server_10.6.11-0ubuntu0.22.10.1_all.debLinux
Multiple vulnerabilities affected in MariaDB 10.7.3 (For Linux)Linux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-backup-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-common-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-connect-engine-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-cracklib-password-check-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-devel-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-errmsg-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-gssapi-server-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-oqgraph-engine-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-pam-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-rocksdb-engine-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-server-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-server-utils-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-sphinx-engine-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-test-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234