CVE-2022-32082 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 38%

Affected Products (NVD)

Vendor	Product	Version
mariadb	mariadb	10.5.0 ≤ 𝑥 < 10.5.17
mariadb	mariadb	10.6.0 ≤ 𝑥 < 10.6.9
mariadb	mariadb	10.7.0 ≤ 𝑥 < 10.7.5
mariadb	mariadb	10.8.0 ≤ 𝑥 < 10.8.4
mariadb	mariadb	10.9.0 ≤ 𝑥 < 10.9.2

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

mariadb-10.5

bullseye	1:10.5.23-0+deb11u1 fixed
bullseye (security)	1:10.5.26-0+deb11u2 fixed

Ubuntu Releases

Ubuntu Product

Codename

mariadb-10.0

bionic	dne
focal	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	needs-triage

mariadb-10.1

bionic	needs-triage
focal	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

mariadb-10.3

bionic	dne
focal	Fixed 1:10.3.37-0ubuntu0.20.04.1 released
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

mariadb-10.5

bionic	dne
focal	dne
impish	ignored
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

mariadb-10.6

bionic	dne
focal	dne
impish	dne
jammy	Fixed 1:10.6.11-0ubuntu0.22.04.1 released
kinetic	Fixed 1:10.6.9-1 released
lunar	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

mariadb-5.5

bionic	dne
focal	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	ignored
xenial	dne

openSUSE / SLES Releases

openSUSE Product

Release

libmariadbd-devel

suse enterprise sap 15 SP3	10.5.17-150300.3.21.1 fixed
suse enterprise sap 15 SP4	10.6.9-150400.3.12.1 fixed
suse enterprise sap 15 SP5	10.6.9-150400.3.12.1 fixed
suse enterprise sap 15 SP7	11.4.5-150700.1.2 fixed
suse enterprise server 15 SP3	10.5.17-150300.3.21.1 fixed
suse enterprise server 15 SP4	10.6.9-150400.3.12.1 fixed
suse enterprise server 15 SP5	10.6.9-150400.3.12.1 fixed
suse enterprise server 15 SP7	11.4.5-150700.1.2 fixed

libmariadbd19

suse enterprise sap 15 SP3	10.5.17-150300.3.21.1 fixed
suse enterprise sap 15 SP4	10.6.9-150400.3.12.1 fixed
suse enterprise sap 15 SP5	10.6.9-150400.3.12.1 fixed
suse enterprise sap 15 SP7	11.4.5-150700.1.2 fixed
suse enterprise server 15 SP3	10.5.17-150300.3.21.1 fixed
suse enterprise server 15 SP4	10.6.9-150400.3.12.1 fixed
suse enterprise server 15 SP5	10.6.9-150400.3.12.1 fixed
suse enterprise server 15 SP7	11.4.5-150700.1.2 fixed

mariadb

suse enterprise sap 15 SP3	10.5.17-150300.3.21.1 fixed
suse enterprise sap 15 SP4	10.6.9-150400.3.12.1 fixed
suse enterprise sap 15 SP5	10.6.9-150400.3.12.1 fixed
suse enterprise sap 15 SP7	11.4.5-150700.1.2 fixed
suse enterprise server 15 SP3	10.5.17-150300.3.21.1 fixed
suse enterprise server 15 SP4	10.6.9-150400.3.12.1 fixed
suse enterprise server 15 SP5	10.6.9-150400.3.12.1 fixed
suse enterprise server 15 SP7	11.4.5-150700.1.2 fixed

mariadb-client

suse enterprise sap 15 SP3	10.5.17-150300.3.21.1 fixed
suse enterprise sap 15 SP4	10.6.9-150400.3.12.1 fixed
suse enterprise sap 15 SP5	10.6.9-150400.3.12.1 fixed
suse enterprise sap 15 SP7	11.4.5-150700.1.2 fixed
suse enterprise server 15 SP3	10.5.17-150300.3.21.1 fixed
suse enterprise server 15 SP4	10.6.9-150400.3.12.1 fixed
suse enterprise server 15 SP5	10.6.9-150400.3.12.1 fixed
suse enterprise server 15 SP7	11.4.5-150700.1.2 fixed

mariadb-errormessages

suse enterprise sap 15 SP3	10.5.17-150300.3.21.1 fixed
suse enterprise sap 15 SP4	10.6.9-150400.3.12.1 fixed
suse enterprise sap 15 SP5	10.6.9-150400.3.12.1 fixed
suse enterprise sap 15 SP7	11.4.5-150700.1.2 fixed
suse enterprise server 15 SP3	10.5.17-150300.3.21.1 fixed
suse enterprise server 15 SP4	10.6.9-150400.3.12.1 fixed
suse enterprise server 15 SP5	10.6.9-150400.3.12.1 fixed
suse enterprise server 15 SP7	11.4.5-150700.1.2 fixed

mariadb-tools

suse enterprise sap 15 SP3	10.5.17-150300.3.21.1 fixed
suse enterprise sap 15 SP4	10.6.9-150400.3.12.1 fixed
suse enterprise sap 15 SP5	10.6.9-150400.3.12.1 fixed
suse enterprise sap 15 SP7	11.4.5-150700.1.2 fixed
suse enterprise server 15 SP3	10.5.17-150300.3.21.1 fixed
suse enterprise server 15 SP4	10.6.9-150400.3.12.1 fixed
suse enterprise server 15 SP5	10.6.9-150400.3.12.1 fixed
suse enterprise server 15 SP7	11.4.5-150700.1.2 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

galera

RHEL 9

0:26.4.14-1.el9_2

fixed

mariadb

RHEL 9

3:10.5.22-1.el9_2

fixed

mariadb-backup

RHEL 9

3:10.5.22-1.el9_2

fixed

mariadb-common

RHEL 9

3:10.5.22-1.el9_2

fixed

mariadb-devel

RHEL 9

3:10.5.22-1.el9_2

fixed

mariadb-embedded

RHEL 9

3:10.5.22-1.el9_2

fixed

mariadb-embedded-devel

RHEL 9

3:10.5.22-1.el9_2

fixed

mariadb-errmsg

RHEL 9

3:10.5.22-1.el9_2

fixed

mariadb-gssapi-server

RHEL 9

3:10.5.22-1.el9_2

fixed

mariadb-oqgraph-engine

RHEL 9

3:10.5.22-1.el9_2

fixed

mariadb-pam

RHEL 9

3:10.5.22-1.el9_2

fixed

mariadb-server

RHEL 9

3:10.5.22-1.el9_2

fixed

mariadb-server-galera

RHEL 9

3:10.5.22-1.el9_2

fixed

mariadb-server-utils

RHEL 9

3:10.5.22-1.el9_2

fixed

mariadb-test

RHEL 9

3:10.5.22-1.el9_2

fixed

Known Exploits!

Common Weakness Enumeration

CWE-617 - Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References

https://jira.mariadb.org/browse/MDEV-26433

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCOEGSVMIEXDZHBOSV6WVF7FAVRBR2JE/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTVAONAZXJFGHAJ4RP2OF3EAMQCOTDSQ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY/

https://security.netapp.com/advisory/ntap-20220818-0005/

https://jira.mariadb.org/browse/MDEV-26433

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCOEGSVMIEXDZHBOSV6WVF7FAVRBR2JE/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTVAONAZXJFGHAJ4RP2OF3EAMQCOTDSQ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY/

https://security.netapp.com/advisory/ntap-20220818-0005/