CVE-2022-47015

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2023-01-20

Last modified

2025-04-03

Weaknesses

CWE-476

Affected products

• Mariadb (Mariadb)

References

• https://github.com/MariaDB/server/commit/be0a46b3d52b58956fd0d47d040b9f4514406954
• https://lists.debian.org/debian-lts-announce/2023/06/msg00005.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O22PO3Q6TRSNJI2A2WTJH3…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SUQ33SPQCZQD63TWAM3XKF…
• https://security.netapp.com/advisory/ntap-20230309-0009/