CVE-2022-27381

HIGH 7.5CVE-2022-27381 · Published 12/04/2022 · updated 17/06/2026

In short

CVE-2022-27381 is a HIGH (CVSS 7.5) vulnerability affecting mariadb (mariadb).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.5% of all vulnerabilities.
Fix: update to 10.2.44, 10.3.35, 10.4.25, 10.5.16 or later.

Package	Affected versions	Patched versions
mariadb mariadb	`≥ 10.2.0, < 10.2.44≥ 10.3.0, < 10.3.35≥ 10.4.0, < 10.4.25≥ 10.5.0, < 10.5.16≥ 10.6.0, < 10.6.8≥ 10.7.0, < 10.7.4`	`10.2.4410.3.3510.4.2510.5.1610.6.810.7.4`

Description

An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

References

jira.mariadb.org/browse/MDEV-26061 · Exploit
lists.debian.org/debian-lts-announce/2022/09/msg00023.html · Mailing List
security.netapp.com/advisory/ntap-20220519-0006 · Third Party Advisory

More vulnerabilities in mariadb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mariadb

≥ 10.2.0, < 10.2.44≥ 10.3.0, < 10.3.35≥ 10.4.0, < 10.4.25≥ 10.5.0, < 10.5.16≥ 10.6.0, < 10.6.8≥ 10.7.0, < 10.7.4

10.2.4410.3.3510.4.2510.5.1610.6.810.7.4

More vulnerabilities in mariadb

See all →