GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

RHSA-2022:5759

Vulnerability from csaf_redhat - Published: 2022-07-28 16:06 - Updated: 2026-08-04 12:38
Summary
Red Hat Security Advisory: rh-mariadb105-galera and rh-mariadb105-mariadb security and bugfix update
Severity
Moderate
Notes
Topic: An update for rh-mariadb105-galera and rh-mariadb105-mariadb is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. The following packages have been upgraded to a later upstream version: rh-mariadb105-galera (26.4.11), rh-mariadb105-mariadb (10.5.16). Security Fix(es): * mariadb: convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669) * mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048) * mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050) * mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051) * mariadb: CONNECT storage engine heap-based buffer overflow (CVE-2022-24052) * mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376) * mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377) * mariadb: crash in create_tmp_table::finalize (CVE-2022-27378) * mariadb: crash in arg_comparator::compare_real_fixed (CVE-2022-27379) * mariadb: crash at my_decimal::operator= (CVE-2022-27380) * mariadb: crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381) * mariadb: assertion failure via Item_field::used_tables/update_depend_map_for_order (CVE-2022-27382) * mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383) * mariadb: crash via Item_subselect::init_expr_cache_tracker (CVE-2022-27384) * mariadb: crashe in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386) * mariadb: assertion failures in decimal_bin_size (CVE-2022-27387) * mariadb: crash when using HAVING with NOT EXIST predicate in an equality (CVE-2022-27444) * mariadb: assertion failure in compare_order_elements (CVE-2022-27445) * mariadb: crash when using HAVING with IS NULL predicate in an equality (CVE-2022-27446) * mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447) * mariadb: crash in multi-update and implicit grouping (CVE-2022-27448) * mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449) * mariadb: crash via window function in expression in ORDER BY (CVE-2022-27451) * mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452) * mariadb: use-after-free when WHERE has subquery with an outer reference in HAVING (CVE-2022-27455) * mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456) * mariadb: incorrect key in "dup value" error after long unique (CVE-2022-27457) * mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458) * mariadb: improper locking in ds_compress.cc (CVE-2022-31622) * mariadb: improper locking in ds_compress.cc (CVE-2022-31623) * mariadb: crash at init_expr_cache_tracker (CVE-2022-32083) * mariadb: crash in cleanup/Item::cleanup_processor (CVE-2022-32085) * mariadb: crash in fix_outer_field for INSERT SELECT (CVE-2022-32086) * mariadb: crash in Item_args::walk_args (CVE-2022-32087) * mariadb: segmentation fault in get_loops/report_use/filesort (CVE-2022-32088) * mariadb: crash executing query with VIEW, aggregate and subquery (CVE-2021-46659) * mariadb: crash via an unused common table expression (CTE) (CVE-2021-46661) * mariadb: ha_maria::extra crash via certain SELECT statements (CVE-2021-46663) * mariadb: crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664) * mariadb: sql_parse.cc crash because of used_tables expectations (CVE-2021-46665) * mariadb: application crash via long SELECT DISTINCT statements (CVE-2021-46668) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Don't use less parallelism if not necessary (BZ#2101776) * [Tracker] Rebase to Galera 26.4.11 (BZ#2101783)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.

CWE-20 - Improper Input Validation
Affected products
Product Identifier Version Remediation
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-3:10.5.16-2.el7.src
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-backup-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-backup-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-backup-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-backup-syspaths-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-backup-syspaths-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-backup-syspaths-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-common-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-common-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-common-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-config-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-config-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-config-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-config-syspaths-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-config-syspaths-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-config-syspaths-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-connect-engine-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-connect-engine-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-connect-engine-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-debuginfo-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-debuginfo-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-debuginfo-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-devel-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-devel-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-devel-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-errmsg-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-errmsg-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-errmsg-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-gssapi-server-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-gssapi-server-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-gssapi-server-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-libs-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-libs-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-libs-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-oqgraph-engine-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-oqgraph-engine-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-oqgraph-engine-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-pam-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-pam-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-pam-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-galera-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-galera-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-galera-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-galera-syspaths-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-galera-syspaths-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-galera-syspaths-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-syspaths-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-syspaths-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-syspaths-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-utils-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-utils-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-utils-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-utils-syspaths-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-utils-syspaths-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-server-utils-syspaths-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-syspaths-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-syspaths-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-syspaths-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-test-3:10.5.16-2.el7.ppc64le
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-test-3:10.5.16-2.el7.s390x
Vendor Fix fix
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-mariadb-test-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-3:10.5.16-2.el7.src
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-backup-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-backup-syspaths-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-common-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-config-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-config-syspaths-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-connect-engine-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-debuginfo-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-devel-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-errmsg-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-gssapi-server-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-libs-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-oqgraph-engine-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-pam-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-server-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-server-galera-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-server-galera-syspaths-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-server-syspaths-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-server-utils-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-server-utils-syspaths-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-syspaths-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-mariadb-test-3:10.5.16-2.el7.x86_64
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-galera-0:26.4.11-1.el7.ppc64le
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-galera-0:26.4.11-1.el7.s390x
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-galera-0:26.4.11-1.el7.src
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-galera-0:26.4.11-1.el7.x86_64
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-galera-debuginfo-0:26.4.11-1.el7.ppc64le
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-galera-debuginfo-0:26.4.11-1.el7.s390x
Unresolved product id: 7Server-RHSCL-3.8:rh-mariadb105-galera-debuginfo-0:26.4.11-1.el7.x86_64
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-galera-0:26.4.11-1.el7.src
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-galera-0:26.4.11-1.el7.x86_64
Unresolved product id: 7Workstation-RHSCL-3.8:rh-mariadb105-galera-debuginfo-0:26.4.11-1.el7.x86_64
Threats
Impact Low

MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE).

CWE-20 - Improper Input Validation
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Low

MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.

CWE-20 - Improper Input Validation
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Low

MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.

CWE-476 - NULL Pointer Dereference
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Low

MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations.

CWE-20 - Improper Input Validation
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Low

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.

CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Low

A use-after-free vulnerability was found in MariaDB. This flaw allows attackers to trigger a convert_const_to_int() use-after-free when the BIGINT data type is used, resulting in a denial of service.

CWE-416 - Use After Free
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

Vulnerability in the MySQL Server product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207.

CWE-1173 - Improper Use of Validation Framework
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193.

CWE-134 - Use of Externally-Controlled Format String
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in MariaDB. Lack of input validation leads to a heap buffer overflow. This flaw allows an authenticated, local attacker with at least a low level of privileges to submit a crafted SQL query to MariaDB and escalate their privileges to the level of the MariaDB service user, running arbitrary code.

CWE-122 - Heap-based Buffer Overflow
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A use-after-free flaw was found in Maria DB. The MariaDB Server contains a use-after-free in the component, Item_args::walk_arg, which is exploited via specially crafted SQL statements, affecting availability.

CWE-617 - Reachable Assertion
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server, where it contains a use-after-free in the component, Item_func_in::cleanup(). This issue is exploited via specially crafted SQL statements, affecting availability.

CWE-416 - Use After Free
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in MariaDB. The component, Create_tmp_table::finalize, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, affecting availability.

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in MariaDB. The component, Arg_comparator::compare_real_fixed, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, affecting availability.

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in MariaDB. The component, my_decimal::operator=, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, affecting availability.

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in MariaDB. The component, Field::set_default, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, affecting availability.

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in MariaDB. A segmentation fault via the component, Item_field::used_tables/update_depend_map_for_order, impacts availability.

CWE-617 - Reachable Assertion
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server. A use-after-free in the component, my_strcasecmp_8bit, can be exploited via specially crafted SQL statements, impacting availability.

CWE-416 - Use After Free
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in MariaDB. An issue in the component, Item_subselect::init_expr_cache_tracker of the MariaDB Server, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, impacting availability.

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sql_class.cc, impacting availability.

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server. It contains a global buffer overflow in the component, decimal_bin_size, which is exploited via specially crafted SQL statements, impacting availability.

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/item_subselect.cc, affecting availability.

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sql_window.cc, impacting availability.

Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/item_cmpfunc.h, impacting availability.

CWE-617 - Reachable Assertion
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server. It contains a use-after-free via the component,Binary_string::free_buffer() at /sql/sql_string.h, affecting availability.

CWE-617 - Reachable Assertion
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

An assertion failure was found in the MariaDB Server. This issue is via, 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc, affecting availability.

CWE-617 - Reachable Assertion
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/item_func.cc:148, affecting availability.

CWE-617 - Reachable Assertion
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/field_conv.cc, affecting availability.

CWE-1173 - Improper Use of Validation Framework
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/item_cmpfunc.cc, affecting availability.

CWE-617 - Reachable Assertion
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, my_wildcmp_8bit_impl at /strings/ctype-simple.c, affecting availability.

CWE-416 - Use After Free
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, VDec::VDec at /sql/sql_type.cc, affecting availability.

CWE-617 - Reachable Assertion
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, my_mb_wc_latin1 at /strings/ctype-latin1.c, affecting availability.

CWE-416 - Use After Free
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, Binary_string::free_buffer() at /sql/sql_string.h, affecting availability.

CWE-617 - Reachable Assertion
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

CWE-404 - Improper Resource Shutdown or Release
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

CWE-667 - Improper Locking
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.

CWE-229 - Improper Handling of Values
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.

CWE-229 - Improper Handling of Values
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.

CWE-229 - Improper Handling of Values
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.

CWE-229 - Improper Handling of Values
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.

CWE-229 - Improper Handling of Values
Affected products
Fixed 90 products, the same list as for CVE-2021-46659
Known not affected 10 products, the same list as for CVE-2021-46659
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHSA-2022:5759 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=2049302 external
https://bugzilla.redhat.com/show_bug.cgi?id=2050017 external
https://bugzilla.redhat.com/show_bug.cgi?id=2050022 external
https://bugzilla.redhat.com/show_bug.cgi?id=2050024 external
https://bugzilla.redhat.com/show_bug.cgi?id=2050026 external
https://bugzilla.redhat.com/show_bug.cgi?id=2050032 external
https://bugzilla.redhat.com/show_bug.cgi?id=2050034 external
https://bugzilla.redhat.com/show_bug.cgi?id=2068211 external
https://bugzilla.redhat.com/show_bug.cgi?id=2068233 external
https://bugzilla.redhat.com/show_bug.cgi?id=2068234 external
https://bugzilla.redhat.com/show_bug.cgi?id=2069833 external
https://bugzilla.redhat.com/show_bug.cgi?id=2074817 external
https://bugzilla.redhat.com/show_bug.cgi?id=2074947 external
https://bugzilla.redhat.com/show_bug.cgi?id=2074949 external
https://bugzilla.redhat.com/show_bug.cgi?id=2074951 external
https://bugzilla.redhat.com/show_bug.cgi?id=2074966 external
https://bugzilla.redhat.com/show_bug.cgi?id=2074981 external
https://bugzilla.redhat.com/show_bug.cgi?id=2074987 external
https://bugzilla.redhat.com/show_bug.cgi?id=2074996 external
https://bugzilla.redhat.com/show_bug.cgi?id=2074999 external
https://bugzilla.redhat.com/show_bug.cgi?id=2075005 external
https://bugzilla.redhat.com/show_bug.cgi?id=2075006 external
https://bugzilla.redhat.com/show_bug.cgi?id=2075691 external
https://bugzilla.redhat.com/show_bug.cgi?id=2075692 external
https://bugzilla.redhat.com/show_bug.cgi?id=2075693 external
https://bugzilla.redhat.com/show_bug.cgi?id=2075694 external
https://bugzilla.redhat.com/show_bug.cgi?id=2075695 external
https://bugzilla.redhat.com/show_bug.cgi?id=2075696 external
https://bugzilla.redhat.com/show_bug.cgi?id=2075697 external
https://bugzilla.redhat.com/show_bug.cgi?id=2075699 external
https://bugzilla.redhat.com/show_bug.cgi?id=2075700 external
https://bugzilla.redhat.com/show_bug.cgi?id=2075701 external
https://bugzilla.redhat.com/show_bug.cgi?id=2076144 external
https://bugzilla.redhat.com/show_bug.cgi?id=2076145 external
https://bugzilla.redhat.com/show_bug.cgi?id=2092354 external
https://bugzilla.redhat.com/show_bug.cgi?id=2092360 external
https://bugzilla.redhat.com/show_bug.cgi?id=2101776 external
https://bugzilla.redhat.com/show_bug.cgi?id=2101777 external
https://bugzilla.redhat.com/show_bug.cgi?id=2101782 external
https://bugzilla.redhat.com/show_bug.cgi?id=2101783 external
https://bugzilla.redhat.com/show_bug.cgi?id=2104425 external
https://bugzilla.redhat.com/show_bug.cgi?id=2104431 external
https://bugzilla.redhat.com/show_bug.cgi?id=2104433 external
https://bugzilla.redhat.com/show_bug.cgi?id=2104434 external
https://bugzilla.redhat.com/show_bug.cgi?id=2106008 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2021-46659 self
https://bugzilla.redhat.com/show_bug.cgi?id=2049302 external
https://www.cve.org/CVERecord?id=CVE-2021-46659 external
https://nvd.nist.gov/vuln/detail/CVE-2021-46659 external
https://access.redhat.com/security/cve/CVE-2021-46661 self
https://bugzilla.redhat.com/show_bug.cgi?id=2050017 external
https://www.cve.org/CVERecord?id=CVE-2021-46661 external
https://nvd.nist.gov/vuln/detail/CVE-2021-46661 external
https://access.redhat.com/security/cve/CVE-2021-46663 self
https://bugzilla.redhat.com/show_bug.cgi?id=2050022 external
https://www.cve.org/CVERecord?id=CVE-2021-46663 external
https://nvd.nist.gov/vuln/detail/CVE-2021-46663 external
https://access.redhat.com/security/cve/CVE-2021-46664 self
https://bugzilla.redhat.com/show_bug.cgi?id=2050024 external
https://www.cve.org/CVERecord?id=CVE-2021-46664 external
https://nvd.nist.gov/vuln/detail/CVE-2021-46664 external
https://access.redhat.com/security/cve/CVE-2021-46665 self
https://bugzilla.redhat.com/show_bug.cgi?id=2050026 external
https://www.cve.org/CVERecord?id=CVE-2021-46665 external
https://nvd.nist.gov/vuln/detail/CVE-2021-46665 external
https://access.redhat.com/security/cve/CVE-2021-46668 self
https://bugzilla.redhat.com/show_bug.cgi?id=2050032 external
https://www.cve.org/CVERecord?id=CVE-2021-46668 external
https://nvd.nist.gov/vuln/detail/CVE-2021-46668 external
https://access.redhat.com/security/cve/CVE-2021-46669 self
https://bugzilla.redhat.com/show_bug.cgi?id=2050034 external
https://www.cve.org/CVERecord?id=CVE-2021-46669 external
https://nvd.nist.gov/vuln/detail/CVE-2021-46669 external
https://access.redhat.com/security/cve/CVE-2022-21595 self
https://bugzilla.redhat.com/show_bug.cgi?id=2142862 external
https://www.cve.org/CVERecord?id=CVE-2022-21595 external
https://nvd.nist.gov/vuln/detail/CVE-2022-21595 external
https://access.redhat.com/security/cve/CVE-2022-24048 self
https://bugzilla.redhat.com/show_bug.cgi?id=2068234 external
https://www.cve.org/CVERecord?id=CVE-2022-24048 external
https://nvd.nist.gov/vuln/detail/CVE-2022-24048 external
https://access.redhat.com/security/cve/CVE-2022-24050 self
https://bugzilla.redhat.com/show_bug.cgi?id=2069833 external
https://www.cve.org/CVERecord?id=CVE-2022-24050 external
https://nvd.nist.gov/vuln/detail/CVE-2022-24050 external
https://access.redhat.com/security/cve/CVE-2022-24051 self
https://bugzilla.redhat.com/show_bug.cgi?id=2068233 external
https://www.cve.org/CVERecord?id=CVE-2022-24051 external
https://nvd.nist.gov/vuln/detail/CVE-2022-24051 external
https://access.redhat.com/security/cve/CVE-2022-24052 self
https://bugzilla.redhat.com/show_bug.cgi?id=2068211 external
https://www.cve.org/CVERecord?id=CVE-2022-24052 external
https://nvd.nist.gov/vuln/detail/CVE-2022-24052 external
https://mariadb.com/kb/en/security/ external
https://access.redhat.com/security/cve/CVE-2022-27376 self
https://bugzilla.redhat.com/show_bug.cgi?id=2074817 external
https://www.cve.org/CVERecord?id=CVE-2022-27376 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27376 external
https://access.redhat.com/security/cve/CVE-2022-27377 self
https://bugzilla.redhat.com/show_bug.cgi?id=2074947 external
https://www.cve.org/CVERecord?id=CVE-2022-27377 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27377 external
https://access.redhat.com/security/cve/CVE-2022-27378 self
https://bugzilla.redhat.com/show_bug.cgi?id=2074949 external
https://www.cve.org/CVERecord?id=CVE-2022-27378 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27378 external
https://access.redhat.com/security/cve/CVE-2022-27379 self
https://bugzilla.redhat.com/show_bug.cgi?id=2074951 external
https://www.cve.org/CVERecord?id=CVE-2022-27379 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27379 external
https://access.redhat.com/security/cve/CVE-2022-27380 self
https://bugzilla.redhat.com/show_bug.cgi?id=2074966 external
https://www.cve.org/CVERecord?id=CVE-2022-27380 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27380 external
https://access.redhat.com/security/cve/CVE-2022-27381 self
https://bugzilla.redhat.com/show_bug.cgi?id=2074981 external
https://www.cve.org/CVERecord?id=CVE-2022-27381 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27381 external
https://access.redhat.com/security/cve/CVE-2022-27382 self
https://bugzilla.redhat.com/show_bug.cgi?id=2074987 external
https://www.cve.org/CVERecord?id=CVE-2022-27382 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27382 external
https://access.redhat.com/security/cve/CVE-2022-27383 self
https://bugzilla.redhat.com/show_bug.cgi?id=2074996 external
https://www.cve.org/CVERecord?id=CVE-2022-27383 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27383 external
https://access.redhat.com/security/cve/CVE-2022-27384 self
https://bugzilla.redhat.com/show_bug.cgi?id=2074999 external
https://www.cve.org/CVERecord?id=CVE-2022-27384 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27384 external
https://access.redhat.com/security/cve/CVE-2022-27386 self
https://bugzilla.redhat.com/show_bug.cgi?id=2075005 external
https://www.cve.org/CVERecord?id=CVE-2022-27386 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27386 external
https://access.redhat.com/security/cve/CVE-2022-27387 self
https://bugzilla.redhat.com/show_bug.cgi?id=2075006 external
https://www.cve.org/CVERecord?id=CVE-2022-27387 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27387 external
https://access.redhat.com/security/cve/CVE-2022-27444 self
https://bugzilla.redhat.com/show_bug.cgi?id=2075696 external
https://www.cve.org/CVERecord?id=CVE-2022-27444 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27444 external
https://access.redhat.com/security/cve/CVE-2022-27445 self
https://bugzilla.redhat.com/show_bug.cgi?id=2075691 external
https://www.cve.org/CVERecord?id=CVE-2022-27445 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27445 external
https://access.redhat.com/security/cve/CVE-2022-27446 self
https://bugzilla.redhat.com/show_bug.cgi?id=2075692 external
https://www.cve.org/CVERecord?id=CVE-2022-27446 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27446 external
https://access.redhat.com/security/cve/CVE-2022-27447 self
https://bugzilla.redhat.com/show_bug.cgi?id=2075693 external
https://www.cve.org/CVERecord?id=CVE-2022-27447 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27447 external
https://access.redhat.com/security/cve/CVE-2022-27448 self
https://bugzilla.redhat.com/show_bug.cgi?id=2075694 external
https://www.cve.org/CVERecord?id=CVE-2022-27448 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27448 external
https://access.redhat.com/security/cve/CVE-2022-27449 self
https://bugzilla.redhat.com/show_bug.cgi?id=2075695 external
https://www.cve.org/CVERecord?id=CVE-2022-27449 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27449 external
https://access.redhat.com/security/cve/CVE-2022-27451 self
https://bugzilla.redhat.com/show_bug.cgi?id=2076144 external
https://www.cve.org/CVERecord?id=CVE-2022-27451 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27451 external
https://access.redhat.com/security/cve/CVE-2022-27452 self
https://bugzilla.redhat.com/show_bug.cgi?id=2076145 external
https://www.cve.org/CVERecord?id=CVE-2022-27452 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27452 external
https://access.redhat.com/security/cve/CVE-2022-27455 self
https://bugzilla.redhat.com/show_bug.cgi?id=2075701 external
https://www.cve.org/CVERecord?id=CVE-2022-27455 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27455 external
https://access.redhat.com/security/cve/CVE-2022-27456 self
https://bugzilla.redhat.com/show_bug.cgi?id=2075697 external
https://www.cve.org/CVERecord?id=CVE-2022-27456 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27456 external
https://access.redhat.com/security/cve/CVE-2022-27457 self
https://bugzilla.redhat.com/show_bug.cgi?id=2075699 external
https://www.cve.org/CVERecord?id=CVE-2022-27457 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27457 external
https://access.redhat.com/security/cve/CVE-2022-27458 self
https://bugzilla.redhat.com/show_bug.cgi?id=2075700 external
https://www.cve.org/CVERecord?id=CVE-2022-27458 external
https://nvd.nist.gov/vuln/detail/CVE-2022-27458 external
https://access.redhat.com/security/cve/CVE-2022-31622 self
https://bugzilla.redhat.com/show_bug.cgi?id=2092354 external
https://www.cve.org/CVERecord?id=CVE-2022-31622 external
https://nvd.nist.gov/vuln/detail/CVE-2022-31622 external
https://access.redhat.com/security/cve/CVE-2022-31623 self
https://bugzilla.redhat.com/show_bug.cgi?id=2092360 external
https://www.cve.org/CVERecord?id=CVE-2022-31623 external
https://nvd.nist.gov/vuln/detail/CVE-2022-31623 external
https://access.redhat.com/security/cve/CVE-2022-32083 self
https://bugzilla.redhat.com/show_bug.cgi?id=2104425 external
https://www.cve.org/CVERecord?id=CVE-2022-32083 external
https://nvd.nist.gov/vuln/detail/CVE-2022-32083 external
https://access.redhat.com/security/cve/CVE-2022-32085 self
https://bugzilla.redhat.com/show_bug.cgi?id=2104431 external
https://www.cve.org/CVERecord?id=CVE-2022-32085 external
https://nvd.nist.gov/vuln/detail/CVE-2022-32085 external
https://access.redhat.com/security/cve/CVE-2022-32086 self
https://bugzilla.redhat.com/show_bug.cgi?id=2104433 external
https://www.cve.org/CVERecord?id=CVE-2022-32086 external
https://nvd.nist.gov/vuln/detail/CVE-2022-32086 external
https://access.redhat.com/security/cve/CVE-2022-32087 self
https://bugzilla.redhat.com/show_bug.cgi?id=2104434 external
https://www.cve.org/CVERecord?id=CVE-2022-32087 external
https://nvd.nist.gov/vuln/detail/CVE-2022-32087 external
https://access.redhat.com/security/cve/CVE-2022-32088 self
https://bugzilla.redhat.com/show_bug.cgi?id=2106008 external
https://www.cve.org/CVERecord?id=CVE-2022-32088 external
https://nvd.nist.gov/vuln/detail/CVE-2022-32088 external

Loading 1.3 MB of JSON…



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Loading…