Use-After-Free Vulnerability in MariaDB Server
Summary
CVE-2022-27376: MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements. Affects mariadb across 2 version ranges.
< 10.4.25-r0
>= 20ae591abd0bfe1bfaee546989ee163f4ef832b1, < a0d4f0f306c6e478a1f45727e8fd9c867f9672d9
Fixed in 10.4.25-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MariaDB Server is an open-source relational database management system that is a drop-in replacement for MySQL. It provides a robust and scalable solution for storing and retrieving data. The vulnerability identified as CVE-2022-27376 affects MariaDB Server versions 10.6.5 and below. This vulnerability is related to an use-after-free issue in the component Item_args::walk_arg, which can be exploited through specially crafted SQL statements.
Vulnerability Detail
The use-after-free vulnerability in MariaDB Server allows an attacker to manipulate memory that has already been freed, leading to potential code execution or a denial of service. By crafting malicious SQL statements, an attacker can trigger the use-after-free condition, potentially allowing them to execute arbitrary code or crash the database server. This vulnerability has a CVSS score of 7.5, indicating a high severity.
How To Fix
Minimum fixed version
10.4.25-r0
This is the first release that contains the fix.
sudo apk add --upgrade mariadbTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update to the fixed versions of MariaDB Server to mitigate the risk.
Conclusion
The use-after-free vulnerability in MariaDB Server poses a significant risk to the security and stability of the database server. It is crucial to update to the fixed versions mentioned above to ensure the integrity of your MariaDB installation. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for mariadb →
FAQ
The use-after-free vulnerability in MariaDB Server can potentially allow an attacker to execute arbitrary code or crash the database server, leading to a denial of service or unauthorized access to sensitive data.
You can use the Vulert Playground at Vulert Scanner to check if your MariaDB Server version is vulnerable to CVE-2022-27376. Simply upload your package-lock.json file to the playground, and it will alert you if your application is affected.
At the time of this report, there are no known public exploits specifically targeting this vulnerability. However, it is crucial to update to the fixed versions to prevent any potential exploitation.
No, updating to the fixed versions is the recommended approach to mitigate the risk associated with this vulnerability. There are no known workarounds or alternative solutions.
You can find more information about this vulnerability, including technical details and the fixed versions, in the official CVE-2022-27376 JSON report at https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-27376.json
Related vulnerabilities
Recent vulnerabilities recorded for mariadb.
