CVE-2022-27456
14.04.2022, 13:15
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mariadb | mariadb | 10.3.0 ≤ 𝑥 < 10.3.35 |
| mariadb | mariadb | 10.4.0 ≤ 𝑥 < 10.4.25 |
| mariadb | mariadb | 10.5.0 ≤ 𝑥 < 10.5.16 |
| mariadb | mariadb | 10.6.0 ≤ 𝑥 < 10.6.8 |
| mariadb | mariadb | 10.7.0 ≤ 𝑥 < 10.7.4 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mariadb-10.1 |
| ||||||||||||||||
| mariadb-10.3 |
| ||||||||||||||||
| mariadb-10.5 |
| ||||||||||||||||
| mariadb-10.6 |
|
Common Weakness Enumeration
References