CVE-2022-32084 - mariadb: segmentation fault via the component sub_select

HIGH

mariadb: segmentation fault via the component sub_select

Published Jul 1, 2022

7.5

HIGH

CVSS 3.1

EPSS 2.28%

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.

Red Hat Enterprise Linux 8

mariadb:10.3-8080020230814130040.63b34585

Fixed · RHSA-2023:5259
Red Hat Enterprise Linux 8

mariadb:10.5-8080020231003163755.63b34585

Fixed · RHSA-2023:5683
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

mariadb:10.5-8040020231006044227.522a0ee4

Fixed · RHSA-2023:6821
Red Hat Enterprise Linux 8.4 Telecommunications Update Service

mariadb:10.5-8040020231006044227.522a0ee4

Fixed · RHSA-2023:6821
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

mariadb:10.5-8040020231006044227.522a0ee4

Fixed · RHSA-2023:6821
Red Hat Enterprise Linux 8.6 Extended Update Support

mariadb:10.5-8060020231005052631.ad008a3a

Fixed · RHSA-2023:6822
Red Hat Enterprise Linux 9

mariadb-3:10.5.22-1.el9_2

Fixed · RHSA-2023:5684
Red Hat Enterprise Linux 9.0 Extended Update Support

galera-0:26.4.14-1.el9_0

Fixed · RHSA-2023:6883
Red Hat Enterprise Linux 9.0 Extended Update Support

mariadb-3:10.5.22-1.el9_0

Fixed · RHSA-2023:6883
Red Hat Software Collections for Red Hat Enterprise Linux 7

rh-mariadb105-mariadb-3:10.5.22-1.el7

Fixed · RHSA-2023:7633
Red Hat Enterprise Linux 7

mariadb

Out of support scope
Red Hat OpenStack Platform 13 (Queens)

mariadb

Out of support scope
Red Hat Software Collections

rh-mariadb103-mariadb

Will not fix

Product	Package	State	Advisory
Red Hat Enterprise Linux 8	mariadb:10.3-8080020230814130040.63b34585	Fixed	RHSA-2023:5259
Red Hat Enterprise Linux 8	mariadb:10.5-8080020231003163755.63b34585	Fixed	RHSA-2023:5683
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	mariadb:10.5-8040020231006044227.522a0ee4	Fixed	RHSA-2023:6821
Red Hat Enterprise Linux 8.4 Telecommunications Update Service	mariadb:10.5-8040020231006044227.522a0ee4	Fixed	RHSA-2023:6821
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	mariadb:10.5-8040020231006044227.522a0ee4	Fixed	RHSA-2023:6821
Red Hat Enterprise Linux 8.6 Extended Update Support	mariadb:10.5-8060020231005052631.ad008a3a	Fixed	RHSA-2023:6822
Red Hat Enterprise Linux 9	mariadb-3:10.5.22-1.el9_2	Fixed	RHSA-2023:5684
Red Hat Enterprise Linux 9.0 Extended Update Support	galera-0:26.4.14-1.el9_0	Fixed	RHSA-2023:6883
Red Hat Enterprise Linux 9.0 Extended Update Support	mariadb-3:10.5.22-1.el9_0	Fixed	RHSA-2023:6883
Red Hat Software Collections for Red Hat Enterprise Linux 7	rh-mariadb105-mariadb-3:10.5.22-1.el7	Fixed	RHSA-2023:7633
Red Hat Enterprise Linux 7	mariadb	Out of support scope	n/a
Red Hat OpenStack Platform 13 (Queens)	mariadb	Out of support scope	n/a
Red Hat Software Collections	rh-mariadb103-mariadb	Will not fix	n/a

No remediation recorded yet.

Weaknesses (1)

CWE-229

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-32084		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2106034		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-53353		Advisory
https://jira.mariadb.org/browse/MDEV-26427		ExploitIssue TrackingThird Party Advisory
https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html		mailing-listMailing ListThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCOEGSVMIEXDZHBOSV6WVF7FAVRBR2JE/		vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTVAONAZXJFGHAJ4RP2OF3EAMQCOTDSQ/		vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY/		vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-32084
https://security.netapp.com/advisory/ntap-20220818-0005/		Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2022-32084