Vulnerabilities > CVE-2022-27455 - Use After Free vulnerability in Mariadb

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

NVD

Published: 2022-04-14

Updated: 2022-06-30

Summary

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c.

Part	Description	Count
Application	Mariadb Mariadb Mariadb 10.7.0 Mariadb Mariadb 10.7.1 Mariadb Mariadb 10.7.2 Mariadb Mariadb 10.7.3 Mariadb Mariadb 10.4.0 Mariadb Mariadb 10.4.1 Mariadb Mariadb 10.4.2 Mariadb Mariadb 10.4.3 Mariadb Mariadb 10.4.4 Mariadb Mariadb 10.4.5 Mariadb Mariadb 10.4.6 Mariadb Mariadb 10.4.7 Mariadb Mariadb 10.4.8 Mariadb Mariadb 10.4.9 Mariadb Mariadb 10.4.10 Mariadb Mariadb 10.4.11 Mariadb Mariadb 10.4.12 Mariadb Mariadb 10.4.13 Mariadb Mariadb 10.4.14 Mariadb Mariadb 10.4.15 Mariadb Mariadb 10.4.16 Mariadb Mariadb 10.4.17 Mariadb Mariadb 10.4.18 Mariadb Mariadb 10.4.19 Mariadb Mariadb 10.4.20 Mariadb Mariadb 10.4.21 Mariadb Mariadb 10.4.22 Mariadb Mariadb 10.4.23 Mariadb Mariadb 10.4.24 Mariadb Mariadb 10.5.0 Mariadb Mariadb 10.5.1 Mariadb Mariadb 10.5.2 Mariadb Mariadb 10.5.3 Mariadb Mariadb 10.5.4 Mariadb Mariadb 10.5.5 Mariadb Mariadb 10.5.6 Mariadb Mariadb 10.5.7 Mariadb Mariadb 10.5.8 Mariadb Mariadb 10.5.9 Mariadb Mariadb 10.5.10 Mariadb Mariadb 10.5.11 Mariadb Mariadb 10.5.12 Mariadb Mariadb 10.5.13 Mariadb Mariadb 10.5.14 Mariadb Mariadb 10.5.15 Mariadb Mariadb 10.6.0 Mariadb Mariadb 10.6.1 Mariadb Mariadb 10.6.2 Mariadb Mariadb 10.6.3 Mariadb Mariadb 10.6.4 Mariadb Mariadb 10.6.5 Mariadb Mariadb 10.6.6 Mariadb Mariadb 10.6.7	53