Rapid7
BACK TO VEDB

CVE-2022-27456: Use After Free

REQUEST DEMO

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.

CVSS Details

  • CVSS 3.1 Base Score: 7.5
  • CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

ProductVendor AdvisorySolution FileAddedPublished
Alma_linux
View advisory ↗View advisory ↗View advisory ↗View advisory ↗
alma-upgrade-galeraalma-upgrade-judyalma-upgrade-mariadbalma-upgrade-mariadb-backupalma-upgrade-mariadb-commonalma-upgrade-mariadb-develalma-upgrade-mariadb-embeddedalma-upgrade-mariadb-embedded-develalma-upgrade-mariadb-errmsgalma-upgrade-mariadb-gssapi-serveralma-upgrade-mariadb-oqgraph-enginealma-upgrade-mariadb-pamalma-upgrade-mariadb-serveralma-upgrade-mariadb-server-galeraalma-upgrade-mariadb-server-utilsalma-upgrade-mariadb-test
Aug 8, 2022Apr 14, 2022
Alpine Linux
View advisory ↗View advisory ↗
alpine-linux-upgrade-mariadb
Mar 26, 2024Apr 14, 2022
Amazon Linux Ami 2
View advisory ↗
amazon-linux-ami-2-upgrade-mariadbamazon-linux-ami-2-upgrade-mariadb-backupamazon-linux-ami-2-upgrade-mariadb-commonamazon-linux-ami-2-upgrade-mariadb-configamazon-linux-ami-2-upgrade-mariadb-connect-engineamazon-linux-ami-2-upgrade-mariadb-cracklib-password-checkamazon-linux-ami-2-upgrade-mariadb-debuginfoamazon-linux-ami-2-upgrade-mariadb-develamazon-linux-ami-2-upgrade-mariadb-embeddedamazon-linux-ami-2-upgrade-mariadb-embedded-develamazon-linux-ami-2-upgrade-mariadb-errmsgamazon-linux-ami-2-upgrade-mariadb-gssapi-serveramazon-linux-ami-2-upgrade-mariadb-libsamazon-linux-ami-2-upgrade-mariadb-oqgraph-engineamazon-linux-ami-2-upgrade-mariadb-pamamazon-linux-ami-2-upgrade-mariadb-rocksdb-engineamazon-linux-ami-2-upgrade-mariadb-s3-engineamazon-linux-ami-2-upgrade-mariadb-serveramazon-linux-ami-2-upgrade-mariadb-server-galeraamazon-linux-ami-2-upgrade-mariadb-server-utilsamazon-linux-ami-2-upgrade-mariadb-sphinx-engineamazon-linux-ami-2-upgrade-mariadb-test
Sep 28, 2023Apr 14, 2022
Amazon_linux_2023
View advisory ↗
amazon-linux-2023-upgrade-mariadb105amazon-linux-2023-upgrade-mariadb105-backupamazon-linux-2023-upgrade-mariadb105-backup-debuginfoamazon-linux-2023-upgrade-mariadb105-commonamazon-linux-2023-upgrade-mariadb105-connect-engineamazon-linux-2023-upgrade-mariadb105-connect-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-cracklib-password-checkamazon-linux-2023-upgrade-mariadb105-cracklib-password-check-debuginfoamazon-linux-2023-upgrade-mariadb105-debuginfoamazon-linux-2023-upgrade-mariadb105-debugsourceamazon-linux-2023-upgrade-mariadb105-develamazon-linux-2023-upgrade-mariadb105-errmsgamazon-linux-2023-upgrade-mariadb105-gssapi-serveramazon-linux-2023-upgrade-mariadb105-gssapi-server-debuginfoamazon-linux-2023-upgrade-mariadb105-oqgraph-engineamazon-linux-2023-upgrade-mariadb105-oqgraph-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-pamamazon-linux-2023-upgrade-mariadb105-pam-debuginfoamazon-linux-2023-upgrade-mariadb105-rocksdb-engineamazon-linux-2023-upgrade-mariadb105-rocksdb-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-serveramazon-linux-2023-upgrade-mariadb105-server-debuginfoamazon-linux-2023-upgrade-mariadb105-server-utilsamazon-linux-2023-upgrade-mariadb105-server-utils-debuginfoamazon-linux-2023-upgrade-mariadb105-sphinx-engineamazon-linux-2023-upgrade-mariadb105-sphinx-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-testamazon-linux-2023-upgrade-mariadb105-test-debuginfo
Feb 17, 2025Nov 9, 2020
Centos_linux—
centos-upgrade-galeracentos-upgrade-galera-debuginfocentos-upgrade-galera-debugsourcecentos-upgrade-judycentos-upgrade-judy-debuginfocentos-upgrade-judy-debugsourcecentos-upgrade-mariadbcentos-upgrade-mariadb-backupcentos-upgrade-mariadb-backup-debuginfocentos-upgrade-mariadb-commoncentos-upgrade-mariadb-debuginfocentos-upgrade-mariadb-debugsourcecentos-upgrade-mariadb-develcentos-upgrade-mariadb-embeddedcentos-upgrade-mariadb-embedded-debuginfocentos-upgrade-mariadb-embedded-develcentos-upgrade-mariadb-errmsgcentos-upgrade-mariadb-gssapi-servercentos-upgrade-mariadb-gssapi-server-debuginfocentos-upgrade-mariadb-oqgraph-enginecentos-upgrade-mariadb-oqgraph-engine-debuginfocentos-upgrade-mariadb-pamcentos-upgrade-mariadb-pam-debuginfocentos-upgrade-mariadb-servercentos-upgrade-mariadb-server-debuginfocentos-upgrade-mariadb-server-galeracentos-upgrade-mariadb-server-utilscentos-upgrade-mariadb-server-utils-debuginfocentos-upgrade-mariadb-testcentos-upgrade-mariadb-test-debuginfocentos-upgrade-mysql-selinux
Aug 3, 2022Apr 14, 2022
Debian
View advisory ↗
debian-upgrade-mariadb-10-5
Sep 19, 2022Apr 14, 2022
Freebsd
View advisory ↗
freebsd-upgrade-package-mariadb103-clientfreebsd-upgrade-package-mariadb103-serverfreebsd-upgrade-package-mariadb104-clientfreebsd-upgrade-package-mariadb104-serverfreebsd-upgrade-package-mariadb105-clientfreebsd-upgrade-package-mariadb105-serverfreebsd-upgrade-package-mariadb106-clientfreebsd-upgrade-package-mariadb106-server
Nov 4, 2022May 23, 2022
Gentoo Linux
View advisory ↗
gentoo-linux-upgrade-dev-db-mariadb
May 10, 2024Apr 14, 2022
Mariadb Mariadb
View advisory ↗View advisory ↗View advisory ↗View advisory ↗
mariadb-mariadb-upgrade-latest
Mar 4, 2025Apr 14, 2022
Oracle_linux—
oracle-linux-upgrade-galeraoracle-linux-upgrade-judyoracle-linux-upgrade-mariadboracle-linux-upgrade-mariadb-backuporacle-linux-upgrade-mariadb-commonoracle-linux-upgrade-mariadb-develoracle-linux-upgrade-mariadb-embeddedoracle-linux-upgrade-mariadb-embedded-develoracle-linux-upgrade-mariadb-errmsgoracle-linux-upgrade-mariadb-gssapi-serveroracle-linux-upgrade-mariadb-oqgraph-engineoracle-linux-upgrade-mariadb-pamoracle-linux-upgrade-mariadb-serveroracle-linux-upgrade-mariadb-server-galeraoracle-linux-upgrade-mariadb-server-utilsoracle-linux-upgrade-mariadb-testoracle-linux-upgrade-mysql-selinux
Aug 4, 2022Nov 9, 2020
Redhat_linux
View advisory ↗
no-fix-redhat-rpm-packageredhat-upgrade-galeraredhat-upgrade-galera-debuginforedhat-upgrade-galera-debugsourceredhat-upgrade-judyredhat-upgrade-judy-debuginforedhat-upgrade-judy-debugsourceredhat-upgrade-mariadbredhat-upgrade-mariadb-backupredhat-upgrade-mariadb-backup-debuginforedhat-upgrade-mariadb-commonredhat-upgrade-mariadb-debuginforedhat-upgrade-mariadb-debugsourceredhat-upgrade-mariadb-develredhat-upgrade-mariadb-embeddedredhat-upgrade-mariadb-embedded-debuginforedhat-upgrade-mariadb-embedded-develredhat-upgrade-mariadb-errmsgredhat-upgrade-mariadb-gssapi-serverredhat-upgrade-mariadb-gssapi-server-debuginforedhat-upgrade-mariadb-oqgraph-engineredhat-upgrade-mariadb-oqgraph-engine-debuginforedhat-upgrade-mariadb-pamredhat-upgrade-mariadb-pam-debuginforedhat-upgrade-mariadb-serverredhat-upgrade-mariadb-server-debuginforedhat-upgrade-mariadb-server-galeraredhat-upgrade-mariadb-server-utilsredhat-upgrade-mariadb-server-utils-debuginforedhat-upgrade-mariadb-testredhat-upgrade-mariadb-test-debuginforedhat-upgrade-mysql-selinux
Aug 3, 2022Apr 14, 2022
Rocky_linux
View advisory ↗View advisory ↗View advisory ↗View advisory ↗
rocky-upgrade-galerarocky-upgrade-galera-debuginforocky-upgrade-galera-debugsourcerocky-upgrade-judyrocky-upgrade-judy-debuginforocky-upgrade-judy-debugsourcerocky-upgrade-mariadbrocky-upgrade-mariadb-backuprocky-upgrade-mariadb-backup-debuginforocky-upgrade-mariadb-commonrocky-upgrade-mariadb-debuginforocky-upgrade-mariadb-debugsourcerocky-upgrade-mariadb-develrocky-upgrade-mariadb-embeddedrocky-upgrade-mariadb-embedded-debuginforocky-upgrade-mariadb-embedded-develrocky-upgrade-mariadb-errmsgrocky-upgrade-mariadb-gssapi-serverrocky-upgrade-mariadb-gssapi-server-debuginforocky-upgrade-mariadb-oqgraph-enginerocky-upgrade-mariadb-oqgraph-engine-debuginforocky-upgrade-mariadb-pamrocky-upgrade-mariadb-pam-debuginforocky-upgrade-mariadb-serverrocky-upgrade-mariadb-server-debuginforocky-upgrade-mariadb-server-galerarocky-upgrade-mariadb-server-utilsrocky-upgrade-mariadb-server-utils-debuginforocky-upgrade-mariadb-testrocky-upgrade-mariadb-test-debuginfo
Mar 12, 2024Apr 14, 2022
Suse—
suse-upgrade-liblz4-1suse-upgrade-libmariadb-develsuse-upgrade-libmariadb3suse-upgrade-libmariadb_pluginssuse-upgrade-libmariadbd-develsuse-upgrade-libmariadbd104-develsuse-upgrade-libmariadbd19suse-upgrade-mariadbsuse-upgrade-mariadb-benchsuse-upgrade-mariadb-clientsuse-upgrade-mariadb-errormessagessuse-upgrade-mariadb-galerasuse-upgrade-mariadb-rpm-macrossuse-upgrade-mariadb-testsuse-upgrade-mariadb-toolssuse-upgrade-mariadb104suse-upgrade-mariadb104-benchsuse-upgrade-mariadb104-clientsuse-upgrade-mariadb104-errormessagessuse-upgrade-mariadb104-galerasuse-upgrade-mariadb104-rpm-macrossuse-upgrade-mariadb104-testsuse-upgrade-mariadb104-toolssuse-upgrade-python3-mysqlclient
Oct 26, 2022Apr 14, 2022
Ubuntu
View advisory ↗
ubuntu-upgrade-mariadb-server
Nov 24, 2022Apr 14, 2022
Vmware Photon_os
View advisory ↗
vmware-photon_os_update_tdnf
Jan 20, 2025Apr 14, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

CVE details

CVSS v4 ScoreN/A
CVSS v3 Score7.5 High
EPSS Score2%
EPSS Percentile80%
In CISA KEV CatalogueFalse

Published

Apr 14, 2022

References

  • NVD ↗
    Rapid7
    Request Demo
    • Request Demo
    • Explore platform
    • Exposure Management
    • Attack Surface Management
    • Vulnerability Management
    • Cloud-Native Application Protection
    • Application Security
    • Next-Gen SIEM
    • Threat Intelligence Platform
    • Start a Free Trial
    • AI-Engine
    • Rapid7 Labs
    • Self-Guided Platform Tour
    • Talk to an Expert
    • Rapid7 Threat Intelligence
    • All Products
    • Managed Detection and Response
    • MDR for Microsoft
    • MDR for Enterprise
    • Incident Response Services
    • Rapid7 vs. Them
    • Customer Stories
    • MDR Product Tour
    • MDR ROI Calculator
    • Managed Vulnerability Management
    • Continuous Red Teaming
    • Managed Application Security
    • Penetration Testing Services
    • All services
    • READ NOW
    • Rapid7 Labs
    • Emergent Threat Response
    • Vulnerability & Exploit Database
    • Blog
    • Webinars and Events
    • Resource Library
    • Cybersecurity Fundamentals
    • Product Documentation
    • Product Release Notes
    • Product Extensions
    • Product Toolkits
    • Customer Support
    • Rapid7 Forum
    • Partnerships Overview
    • PACT Partner Program
    • PACT for Service Providers
    • Partner Directory
    • Technology Partners
    • AWS Partnership
    • Partner Login
    • Become a Partner
    • Become a partner
    • About Us
    • Leadership Team
    • Our Customers
    • Careers
    • Contact Us
    • Newsroom
    • Awards and Recognition
    • Investors
    • Social Good
    • Culture
    • Boston Bruins Partnership
    • Book live demo
    Rapid7

    Get Started

    Command Platform
    Exposure Management
    MDR Services
    Solutions

    Take Action

    Start a Free Trial
    Take a Product Tour
    Get Breach Support
    Contact Sales

    Company

    • About Us
    • Leadership
    • Newsroom
    • Our Customers
    • Partner Programs
    • Investors
    • Careers

    Stay Informed

    • Blog
    • Emergent Threat Response
    • Webinars & Events
    • Rapid7 Labs Research
    • Vulnerability Database
    • Security Fundamentals

    For Customers

    • Sign In
    • Support Portal
    • Product Documentation
    • Extension Library
    • Rapid7 Academy
    • Customer Escalation Portal

    Contact Support

    • +1-866-390-8113

    Follow Us

    LinkedIn icon
    LinkedIn
    X (Twitter) icon
    X (Twitter)
    Facebook icon
    Facebook
    Instagram icon
    Instagram
    Bluesky icon
    Bluesky
    © Rapid7
    Legal TermsPrivacy PolicyExport NoticeTrustCookie ListAccessibility Statement