CVE-2022-27380

Description

An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

References

https://security.netapp.com/advisory/ntap-20220526-0007/

https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html

https://jira.mariadb.org/browse/MDEV-26280

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3