VDB

CVE-2022-27386

CVE-2022-27386 PUBLISHED

Reported by mitre · Published April 12, 2022

MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
mariadb105-serverAmazon Linux3:10.5.16-1.amzn2023.0.7
mariadb105-server-utilsAmazon Linux3:10.5.16-1.amzn2023.0.7
mariadb-minBitnami10.7.4, 10.6.8, 10.5.16, 10.4.25, 10.3.35, 10.2.44

Affected products

VendorProductVersions
n/an/an/a
amazon:2023mariadb105-server0
amazon:2023mariadb105-server-utils0
n/an/a*
amazon:2023mariadb1050
amazon:2023mariadb105-cracklib-password-check0
amazon:2023mariadb105-test0
amazon:2023mariadb105-sphinx-engine0
amazon:2023mariadb105-devel0
amazon:2023mariadb105-pam0
alpinemariadb0, 0, 0
amazon:2023mariadb105-backup0
amazon:2023mariadb105-connect-engine0
amazon:2023mariadb105-errmsg0
amazon:2023mariadb105-rocksdb-engine0
amazon:2023mariadb105-oqgraph-engine0
amazon:2023mariadb105-common0
amazon:2023mariadb105-gssapi-server0

Timeline

  • Apr 12, 2022 CVE Published
  • Apr 13, 2022 EPSS Score (30 in total, the first dated here)
  • Aug 3, 2024 CVE Updated
  • Mar 17, 2026 Distribution Patch (8 in total, the first dated here)
  • Mar 17, 2026 Security Advisory (9 in total, the first dated here)
  • Jun 29, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2022-27386
vulnetix vdb fixes CVE-2022-27386

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-27386/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›