Back to Database
Status published
High
CVE-2022-27385
An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7...
Vulnerability Description
An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-27385
Credits & Attribution
No credits recorded in the NVD database.
References
More from mariadb
View All →CVE-2022-47015
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial...
Unknown
0
CVE-2022-38791
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release...
Medium
5.5
CVE-2022-32091
MariaDB v10.7 was discovered to contain an use-after-poison in in...
High
7.5
CVE-2022-32089
MariaDB v10.5 to v10.7 was discovered to contain a segmentation...
High
7.5
CVE-2022-32088
MariaDB v10.2 to v10.7 was discovered to contain a segmentation...
High
7.5
Affected Vendor
mariadb
View all reports →Affected Software
mariadb
Vulnerable Versions:
0, 10.4.0, 10.5.0, 10.6.0
Timeline
Official Publish:
April 12th, 2022
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.