Test ID:	1.3.6.1.4.1.25623.1.0.126001
Category:	Databases
Title:	MariaDB Multiple Use-After-Free Vulnerabilities (MDEV-28099) - Linux
Summary:	MariaDB is prone to multiple use-after-free vulnerabilities.
Description:	Summary: MariaDB is prone to multiple use-after-free vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2022-27447: Use-after-free in the component Binary_string::free_buffer() at /sql/sql_string.h - CVE-2022-27458: Use-after-free in the component Binary_string::free_buffer() at /sql/sql_string.h Affected Software/OS: MariaDB versions prior to 10.3.35, 10.4.x prior to 10.4.25, 10.5.x prior to 10.5.16, 10.6.x prior to 10.6.8 and 10.7.x prior to 10.7.4. Solution: Update to version 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-27447 https://jira.mariadb.org/browse/MDEV-28099 https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html Common Vulnerability Exposure (CVE) ID: CVE-2022-27458
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.