CVE-2022-32091: Use After Free
Published Jul 1, 2022
·Updated
Last updated 24 July 2024
Other sources
MariaDB v10.7 was discovered to contain an use-after-poison in in interceptormemset at /libsanitizer/sanitizercommon/sanitizercommoninterceptors.inc.
— Launchpad
Affected Software
19 affected componentsFixes available
redhat/mariadb<10.9.2
10.9.2
redhat/mariadb<10.8.4
10.8.4
redhat/mariadb<10.7.5
10.7.5
redhat/mariadb<10.6.9
10.6.9
redhat/mariadb<10.5.17
10.5.17
redhat/mariadb<10.4.26
10.4.26
redhat/mariadb<10.3.36
10.3.36
MariaDB MariaDB>=10.3.0<10.3.36
MariaDB MariaDB>=10.4.0<10.4.26
MariaDB MariaDB>=10.5.0<10.5.17
MariaDB MariaDB>=10.6.0<10.6.9
MariaDB MariaDB>=10.7.0<10.7.5
MariaDB MariaDB>=10.8.0<10.8.4
MariaDB MariaDB>=10.9.0<10.9.2
Debian Debian Linux=10.0
Fedoraproject Fedora=35
Fedoraproject Fedora=36
Fedoraproject Fedora=37
debian/mariadb-10.5
1:10.5.23-0+deb11u11:10.5.28-0+deb11u1
Event History
Jul 1, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Apr 16, 2024
Data Sourced
via Launchpad·02:07 PM
Description
Sep 19, 2024
Data Sourced
via Ubuntu·02:30 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-32091.
2
What is the severity rating of CVE-2022-32091?
CVE-2022-32091 has a severity rating of 7.5 (high).
3
What is the affected software for CVE-2022-32091?
The affected software for CVE-2022-32091 is MariaDB v10.7 up to and excluding v10.9.2.
4
How can I fix CVE-2022-32091?
To fix CVE-2022-32091, upgrade MariaDB to version 10.9.2 or above.
5
Where can I find more information about CVE-2022-32091?
You can find more information about CVE-2022-32091 in the following references: [Reference 1](https://jira.mariadb.org/browse/MDEV-26431), [Reference 2](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2116312), [Reference 3](https://access.redhat.com/errata/RHSA-2023:5259).