CVE-2022-47015

CVE-2022-47015

Name

CVE-2022-47015

Description

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer.

NVD Severity

unknown

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
MISC	https://github.com/MariaDB/server/commit/be0a46b3d52b58956fd0d47d040b9f4514406954
CONFIRM	https://security.netapp.com/advisory/ntap-20230309-0009/
MLIST	https://lists.debian.org/debian-lts-announce/2023/06/msg00005.html
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O22PO3Q6TRSNJI2A2WTJH3VVCHEKBF6C/
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SUQ33SPQCZQD63TWAM3XKFNVNFRGPFYU/

Type

URI

MISC

https://github.com/MariaDB/server/commit/be0a46b3d52b58956fd0d47d040b9f4514406954

CONFIRM

https://security.netapp.com/advisory/ntap-20230309-0009/

MLIST

https://lists.debian.org/debian-lts-announce/2023/06/msg00005.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O22PO3Q6TRSNJI2A2WTJH3VVCHEKBF6C/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SUQ33SPQCZQD63TWAM3XKFNVNFRGPFYU/

Match rules

CPE URI	Source package	Min version	Max version
`cpe:2.3:a:mariadb:mariadb::::::::`	mariadb	>= 10.3.34	<= 10.9.3
`cpe:2.3:a:mariadb:mariadb::::::::`	mariadb	>= 10.3.0	< 10.3.39
`cpe:2.3:a:mariadb:mariadb::::::::`	mariadb	>= 10.4.0	< 10.4.29
`cpe:2.3:a:mariadb:mariadb::::::::`	mariadb	>= 10.5.0	< 10.5.20
`cpe:2.3:a:mariadb:mariadb::::::::`	mariadb	>= 10.6.0	< 10.6.13
`cpe:2.3:a:mariadb:mariadb::::::::`	mariadb	>= 10.8.0	< 10.8.8
`cpe:2.3:a:mariadb:mariadb::::::::`	mariadb	>= 10.9.0	< 10.9.6
`cpe:2.3:a:mariadb:mariadb::::::::`	mariadb	>= 10.10.0	< 10.10.4
`cpe:2.3:a:mariadb:mariadb::::::::`	mariadb	>= 10.11.0	< 10.11.3

CPE URI

Source package

Min version

Max version