CVE-2022-32089: High severity MariaDB MariaDB vulnerability
Last updated 24 July 2024
Other sources
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component stselectlexunit::excludelevel.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.10.0 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.9.2 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.8.4 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.7.5 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.6.9 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.5.17 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.4.26 - Upgrade
Upgrade
debian/mariadb-10.5to a version that resolves this vulnerability.Fixed in 1:10.5.23-0+deb11u1Fixed in 1:10.5.28-0+deb11u1 - Upgrade
Upgrade
alpine/mariadbto a version that resolves this vulnerability.Fixed in 10.5.17-r0 - Upgrade
Upgrade
alpine/mariadbto a version that resolves this vulnerability.Fixed in 10.6.9-r0
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-32089.
What is the severity level of CVE-2022-32089?
The severity level of CVE-2022-32089 is high, with a severity value of 7.5.
Which versions of MariaDB are affected by CVE-2022-32089?
Versions 10.5 to 10.7 of MariaDB are affected by CVE-2022-32089.
How can I fix CVE-2022-32089?
To fix CVE-2022-32089, update your MariaDB installation to version 10.10.0 or higher.
Where can I find more information about CVE-2022-32089?
You can find more information about CVE-2022-32089 at the following references: - [CVE-2022-32089 on JIRA](https://jira.mariadb.org/browse/MDEV-26410) - [CVE-2022-32089 on Bugzilla](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2116312) - [CVE-2022-32089 Red Hat Advisory](https://access.redhat.com/errata/RHSA-2023:5684)