CVE-2022-27384
- Source
- https://cve.org/CVERecord?id=CVE-2022-27384
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-27384.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-27384
- Aliases
- Downstream
- Related
- Published
- 2022-04-12T20:15:08.797Z
- Modified
- 2026-03-11T00:14:53.905409Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An issue in the component Itemsubselect::initexprcachetracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
- References
Affected packages
Git / github.com/mariadb/server
Affected ranges
- Type
- GIT
- Repo
- https://github.com/mariadb/server
- Events
-
IntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixedIntroduced0 Unknown introduced commit / All previous commits are affectedLast affected
- Database specific
{ "versions": [ { "introduced": "10.2.0" }, { "fixed": "10.2.44" }, { "introduced": "10.3.0" }, { "fixed": "10.3.35" }, { "introduced": "10.4.0" }, { "fixed": "10.4.25" }, { "introduced": "10.5.0" }, { "fixed": "10.5.16" }, { "introduced": "10.6.0" }, { "fixed": "10.6.8" }, { "introduced": "0" }, { "last_affected": "10.0" } ] }
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-27384.json"
vanir_signatures
[
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "139410885805228531428960716111714496814",
"length": 3842.0
},
"source": "https://github.com/mariadb/server/commit/0ba528fe56f6c637d9fbc9d177a62610038fd519",
"signature_type": "Function",
"id": "CVE-2022-27384-261ea06f",
"target": {
"file": "sql/sql_parse.cc",
"function": "st_select_lex::add_table_to_list"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"109653293203522022930865857668421870622",
"29073102755632696090890904852202915678",
"319062535768988456620840697081414713359",
"80418953152597147384415640027788794032"
]
},
"source": "https://github.com/mariadb/server/commit/0ba528fe56f6c637d9fbc9d177a62610038fd519",
"signature_type": "Line",
"id": "CVE-2022-27384-7971ffe8",
"target": {
"file": "sql/sql_parse.cc"
}
}
]
unresolved_ranges
[
{
"events": [
{
"introduced": "10.7.0"
},
{
"fixed": "10.7.4"
}
]
},
{
"events": [
{
"introduced": "10.8.0"
},
{
"fixed": "10.8.3"
}
]
}
]