Related Vulnerabilities: CVE-2022-27384  

An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

Description

The MITRE CVE dictionary describes this issue as:

An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

Additional Information

  • Bugzilla 2074999: CVE-2022-27384 mariadb: crash via component Item_subselect::init_expr_cache_tracker.
  • FAQ: Frequently asked questions about CVE-2022-27384