CVE-2022-32087

Description

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.141

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in MariaDB 10.7.3Windows
Multiple vulnerabilities fixed in MariaDB MariaDB 10.7.4Windows
Multiple vulnerabilities fixed in MariaDB MariaDB 10.6.8Windows
Multiple vulnerabilities fixed in MariaDB MariaDB 10.5.16Windows
Multiple vulnerabilities fixed in MariaDB MariaDB 10.4.25Windows
Multiple vulnerabilities fixed in MariaDB MariaDB 10.3.35Windows
(RHSA-2022:6443) mariadb:10.3 security and bug fix update galera-25.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update galera-debugsource-25.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update mariadb-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update mariadb-backup-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update mariadb-common-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update mariadb-debugsource-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update mariadb-devel-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update mariadb-embedded-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update mariadb-embedded-devel-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update mariadb-errmsg-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update mariadb-gssapi-server-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update mariadb-oqgraph-engine-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update mariadb-server-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update mariadb-server-galera-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update mariadb-server-utils-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
(RHSA-2022:6443) mariadb:10.3 security and bug fix update mariadb-test-10.3.35-1.module+el8.6.0+15949+4ba4ec26.x86_64.rpmLinux
Judy update (ELSA-2022-6443) Judy-1.0.5-18.0.1.module+el8.3.0+9616+7a81225f.x86_64.rpmLinux
Galera update (ELSA-2022-6443) galera-25.3.35-1.module+el8.6.0+20730+e6b28fc7.x86_64.rpmLinux
Mariadb update (ELSA-2022-6443) mariadb-10.3.35-1.module+el8.6.0+20730+e6b28fc7.x86_64.rpmLinux
Mariadb-backup update (ELSA-2022-6443) mariadb-backup-10.3.35-1.module+el8.6.0+20730+e6b28fc7.x86_64.rpmLinux
Mariadb-common update (ELSA-2022-6443) mariadb-common-10.3.35-1.module+el8.6.0+20730+e6b28fc7.x86_64.rpmLinux
Mariadb-devel update (ELSA-2022-6443) mariadb-devel-10.3.35-1.module+el8.6.0+20730+e6b28fc7.x86_64.rpmLinux
Mariadb-embedded update (ELSA-2022-6443) mariadb-embedded-10.3.35-1.module+el8.6.0+20730+e6b28fc7.x86_64.rpmLinux
Mariadb-embedded-devel update (ELSA-2022-6443) mariadb-embedded-devel-10.3.35-1.module+el8.6.0+20730+e6b28fc7.x86_64.rpmLinux
Mariadb-errmsg update (ELSA-2022-6443) mariadb-errmsg-10.3.35-1.module+el8.6.0+20730+e6b28fc7.x86_64.rpmLinux
Mariadb-gssapi-server update (ELSA-2022-6443) mariadb-gssapi-server-10.3.35-1.module+el8.6.0+20730+e6b28fc7.x86_64.rpmLinux
Mariadb-oqgraph-engine update (ELSA-2022-6443) mariadb-oqgraph-engine-10.3.35-1.module+el8.6.0+20730+e6b28fc7.x86_64.rpmLinux
Mariadb-server update (ELSA-2022-6443) mariadb-server-10.3.35-1.module+el8.6.0+20730+e6b28fc7.x86_64.rpmLinux
Mariadb-server-galera update (ELSA-2022-6443) mariadb-server-galera-10.3.35-1.module+el8.6.0+20730+e6b28fc7.x86_64.rpmLinux
Mariadb-server-utils update (ELSA-2022-6443) mariadb-server-utils-10.3.35-1.module+el8.6.0+20730+e6b28fc7.x86_64.rpmLinux
Mariadb-test update (ELSA-2022-6443) mariadb-test-10.3.35-1.module+el8.6.0+20730+e6b28fc7.x86_64.rpmLinux
MariaDB database (USN-5739-1) mariadb-server_10.3.37-0ubuntu0.20.04.1_all.debLinux
MariaDB database (USN-5739-1) mariadb-server_10.6.11-0ubuntu0.22.04.1_all.debLinux
MariaDB database (USN-5739-1) mariadb-server_10.6.11-0ubuntu0.22.10.1_all.debLinux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) Judy-1.0.5-18.module+el8.4.0+427+adf35707.x86_64.rpmLinux
Multiple vulnerabilities affected in MariaDB 10.7.3 (For Linux)Linux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) galera-25.3.35-1.module+el8.6.0+1005+cdf19c22.x86_64.rpmLinux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) mariadb-10.3.35-1.module+el8.6.0+1005+cdf19c22.x86_64.rpmLinux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) mariadb-test-10.3.35-1.module+el8.6.0+1005+cdf19c22.x86_64.rpmLinux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) mariadb-devel-10.3.35-1.module+el8.6.0+1005+cdf19c22.x86_64.rpmLinux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) mariadb-backup-10.3.35-1.module+el8.6.0+1005+cdf19c22.x86_64.rpmLinux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) mariadb-common-10.3.35-1.module+el8.6.0+1005+cdf19c22.x86_64.rpmLinux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) mariadb-errmsg-10.3.35-1.module+el8.6.0+1005+cdf19c22.x86_64.rpmLinux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) mariadb-server-10.3.35-1.module+el8.6.0+1005+cdf19c22.x86_64.rpmLinux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) mariadb-embedded-10.3.35-1.module+el8.6.0+1005+cdf19c22.x86_64.rpmLinux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) mariadb-server-utils-10.3.35-1.module+el8.6.0+1005+cdf19c22.x86_64.rpmLinux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) mariadb-gssapi-server-10.3.35-1.module+el8.6.0+1005+cdf19c22.x86_64.rpmLinux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) mariadb-server-galera-10.3.35-1.module+el8.6.0+1005+cdf19c22.x86_64.rpmLinux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) mariadb-embedded-devel-10.3.35-1.module+el8.6.0+1005+cdf19c22.x86_64.rpmLinux
mariadb:10.3 security and bug fix update (RLSA-2022:6443) mariadb-oqgraph-engine-10.3.35-1.module+el8.6.0+1005+cdf19c22.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-backup-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-common-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-connect-engine-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-cracklib-password-check-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-devel-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-errmsg-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-gssapi-server-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-oqgraph-engine-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-pam-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-rocksdb-engine-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-server-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-server-utils-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-sphinx-engine-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-test-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234