mariadb: server crash in Item_field::fix_outer_field for INSERT SELECT
Published Jul 1, 2022
7.5
HIGHCVSS 3.1
EPSS 1.56%
Description
MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.
Affected products
No data.
No data.
Red Hat Enterprise Linux 8
mariadb:10.5-8060020220614163302.ad008a3a
Fixed · RHSA-2022:5826
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
mariadb:10.5-8040020231006044227.522a0ee4
Fixed · RHSA-2023:6821
Red Hat Enterprise Linux 8.4 Telecommunications Update Service
mariadb:10.5-8040020231006044227.522a0ee4
Fixed · RHSA-2023:6821
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
mariadb:10.5-8040020231006044227.522a0ee4
Fixed · RHSA-2023:6821
Red Hat Enterprise Linux 9
galera-0:26.4.11-1.el9_0
Fixed · RHSA-2022:5948
Red Hat Enterprise Linux 9
mariadb-3:10.5.16-2.el9_0
Fixed · RHSA-2022:5948
Red Hat Enterprise Linux 9
mysql-selinux-0:1.0.5-1.el9_0
Fixed · RHSA-2022:5948
Red Hat Software Collections for Red Hat Enterprise Linux 7
rh-mariadb105-mariadb-3:10.5.16-2.el7
Fixed · RHSA-2022:5759
Red Hat Enterprise Linux 7
mariadb
Not affected
Red Hat Enterprise Linux 8
mariadb:10.3/mariadb
Not affected
Red Hat OpenStack Platform 13 (Queens)
mariadb
Out of support scope
Red Hat Software Collections
rh-mariadb103-mariadb
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | mariadb:10.5-8060020220614163302.ad008a3a | Fixed | RHSA-2022:5826 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | mariadb:10.5-8040020231006044227.522a0ee4 | Fixed | RHSA-2023:6821 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | mariadb:10.5-8040020231006044227.522a0ee4 | Fixed | RHSA-2023:6821 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | mariadb:10.5-8040020231006044227.522a0ee4 | Fixed | RHSA-2023:6821 |
| Red Hat Enterprise Linux 9 | galera-0:26.4.11-1.el9_0 | Fixed | RHSA-2022:5948 |
| Red Hat Enterprise Linux 9 | mariadb-3:10.5.16-2.el9_0 | Fixed | RHSA-2022:5948 |
| Red Hat Enterprise Linux 9 | mysql-selinux-0:1.0.5-1.el9_0 | Fixed | RHSA-2022:5948 |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | rh-mariadb105-mariadb-3:10.5.16-2.el7 | Fixed | RHSA-2022:5759 |
| Red Hat Enterprise Linux 7 | mariadb | Not affected | n/a |
| Red Hat Enterprise Linux 8 | mariadb:10.3/mariadb | Not affected | n/a |
| Red Hat OpenStack Platform 13 (Queens) | mariadb | Out of support scope | n/a |
| Red Hat Software Collections | rh-mariadb103-mariadb | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (6)
- https://access.redhat.com/security/cve/CVE-2022-32086 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2104433 Issue Tracking
- https://jira.mariadb.org/browse/MDEV-26412 x_refsource_MISCExploitIssue TrackingThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-32086
- https://security.netapp.com/advisory/ntap-20220826-0007/ x_refsource_CONFIRMThird Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-32086
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2022-32086 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2104433 | Issue Tracking | |
| https://jira.mariadb.org/browse/MDEV-26412 | x_refsource_MISCExploitIssue TrackingThird Party Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2022-32086 | ||
| https://security.netapp.com/advisory/ntap-20220826-0007/ | x_refsource_CONFIRMThird Party Advisory | |
| https://www.cve.org/CVERecord?id=CVE-2022-32086 |
Change history (0)
No recorded changes yet.