CVE-2022-32085: High severity MariaDB MariaDB vulnerability
Last updated 24 July 2024
Other sources
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemfuncin::cleanup/Item::cleanupprocessor.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.7.4 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.6.8 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.5.16 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.4.25 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.3.35 - Upgrade
Upgrade
debian/mariadb-10.5to a version that resolves this vulnerability.Fixed in 1:10.5.23-0+deb11u1Fixed in 1:10.5.28-0+deb11u1
Event History
Frequently Asked Questions
What is CVE-2022-32085?
CVE-2022-32085 is a vulnerability found in MariaDB versions 10.2 to 10.7, which can result in a segmentation fault.
How severe is CVE-2022-32085?
CVE-2022-32085 has a severity rating of 7.5, indicating high severity.
Which software versions are affected by CVE-2022-32085?
MariaDB versions 10.2 to 10.7 are affected by CVE-2022-32085.
What is the vulnerability description of CVE-2022-32085?
CVE-2022-32085 is caused by a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
Are there any references related to CVE-2022-32085?
Yes, you can find more information about CVE-2022-32085 in the following references: [Link 1](https://jira.mariadb.org/browse/MDEV-26407), [Link 2](https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html), [Link 3](https://security.netapp.com/advisory/ntap-20220818-0005/)