Reachable Assertion The advisory has been revoked - it doesn't affect any version of package mariadb-embedded  (opens in a new tab)


Threat Intelligence

EPSS
1.55% (72nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS7-MARIADBEMBEDDED-2764751
  • published14 Apr 2022
  • disclosed19 Aug 2021

Introduced: 19 Aug 2021

CVE-2022-27382  (opens in a new tab)
CWE-617  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:7.

NVD Description

Note: Versions mentioned in the description apply only to the upstream mariadb-embedded package and not the mariadb-embedded package as distributed by Centos.

MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order.