CVE-2022-32091

MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-07-01

Last modified

2024-08-03

Weaknesses

CWE-416

Affected products

• Debian Linux (Debian)
• Fedora (Fedoraproject)
• Mariadb (Mariadb)

References

• https://jira.mariadb.org/browse/MDEV-26431
• https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCOEGSVMIEXDZHBOSV6WVF…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTVAONAZXJFGHAJ4RP2OF3…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHISY4YVO4S5QJYYIXCIAX…
• https://security.netapp.com/advisory/ntap-20220818-0005/