Vulnerabilities > CVE-2022-27377 - Use After Free vulnerability in multiple products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
mariadb
debian
CWE-416

Summary

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.

Vulnerable Configurations

Part Description Count
Application
Mariadb
129
OS
Debian
1

Common Weakness Enumeration (CWE)