vulnerability
Amazon Linux 2023: CVE-2022-47015: Important priority package update for mariadb105
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:S/C:N/I:N/A:C) | Sep 27, 2022 | Feb 17, 2025 | Jul 4, 2025 |
Severity
7
CVSS
(AV:N/AC:L/Au:S/C:N/I:N/A:C)
Published
Sep 27, 2022
Added
Feb 17, 2025
Modified
Jul 4, 2025
Description
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer.
Solutions
amazon-linux-2023-upgrade-mariadb105amazon-linux-2023-upgrade-mariadb105-backupamazon-linux-2023-upgrade-mariadb105-backup-debuginfoamazon-linux-2023-upgrade-mariadb105-commonamazon-linux-2023-upgrade-mariadb105-connect-engineamazon-linux-2023-upgrade-mariadb105-connect-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-cracklib-password-checkamazon-linux-2023-upgrade-mariadb105-cracklib-password-check-debuginfoamazon-linux-2023-upgrade-mariadb105-debuginfoamazon-linux-2023-upgrade-mariadb105-debugsourceamazon-linux-2023-upgrade-mariadb105-develamazon-linux-2023-upgrade-mariadb105-errmsgamazon-linux-2023-upgrade-mariadb105-gssapi-serveramazon-linux-2023-upgrade-mariadb105-gssapi-server-debuginfoamazon-linux-2023-upgrade-mariadb105-oqgraph-engineamazon-linux-2023-upgrade-mariadb105-oqgraph-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-pamamazon-linux-2023-upgrade-mariadb105-pam-debuginfoamazon-linux-2023-upgrade-mariadb105-rocksdb-engineamazon-linux-2023-upgrade-mariadb105-rocksdb-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-serveramazon-linux-2023-upgrade-mariadb105-server-debuginfoamazon-linux-2023-upgrade-mariadb105-server-utilsamazon-linux-2023-upgrade-mariadb105-server-utils-debuginfoamazon-linux-2023-upgrade-mariadb105-sphinx-engineamazon-linux-2023-upgrade-mariadb105-sphinx-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-testamazon-linux-2023-upgrade-mariadb105-test-debuginfo
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.