PT-2022-3316 · Mariadb+9 · Mariadb+10
Zhiyong Wu
·
Published
2021-08-19
·
Updated
2025-06-10
·
CVE-2022-32088
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
MariaDB versions 10.2 through 10.7
Description
The issue is related to a buffer overflow in the Exec time tracker::get loops/Filesort tracker::report use/filesort function of the MariaDB database management system. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability is associated with a segmentation fault via the mentioned component.
Recommendations
For MariaDB versions 10.2 through 10.7, consider applying a patch or update to resolve the issue, as the current information does not specify a fixed version. As a temporary workaround, consider restricting access to the Exec time tracker::get loops and Filesort tracker::report use/filesort functions until a patch is available.
Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Mariadb
Mariadb Server
Red Hat
Rocky Linux
Suse
Ubuntu