CVE-2022-27378

HIGH 7.5CVE-2022-27378 · Published 12/04/2022 · updated 17/06/2026

In short

CVE-2022-27378 is a HIGH (CVSS 7.5) vulnerability affecting mariadb (mariadb).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.1% of all vulnerabilities.
Fix: update to 10.2.44, 10.3.35, 10.4.25, 10.5.16 or later.

Package	Affected versions	Patched versions
mariadb mariadb	`= 10.9≥ 10.2.0, < 10.2.44≥ 10.3.0, < 10.3.35≥ 10.4.0, < 10.4.25≥ 10.5.0, < 10.5.16≥ 10.6.0, < 10.6.8≥ 10.7.0, < 10.7.4≥ 10.8.0, < 10.8.3`	`10.2.4410.3.3510.4.2510.5.1610.6.810.7.410.8.3`

Description

An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

References

jira.mariadb.org/browse/MDEV-26423 · Exploit
lists.debian.org/debian-lts-announce/2022/09/msg00023.html · Mailing List
security.netapp.com/advisory/ntap-20220526-0004 · Third Party Advisory

More vulnerabilities in mariadb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mariadb

= 10.9≥ 10.2.0, < 10.2.44≥ 10.3.0, < 10.3.35≥ 10.4.0, < 10.4.25≥ 10.5.0, < 10.5.16≥ 10.6.0, < 10.6.8≥ 10.7.0, < 10.7.4≥ 10.8.0, < 10.8.3

10.2.4410.3.3510.4.2510.5.1610.6.810.7.410.8.3

More vulnerabilities in mariadb

See all →