Log in Start free

Vulnerability · Published Jan 20, 2023 · Assigned by mitre

CVE-2022-47015

Medium 6.5

In plain English

A medium-severity null pointer dereference in the Judy package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 75% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)1.6%top 24.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8Judy1.0.5-18.module_el8.6.0+3138+72759d2fALSA-2023:5259
AlmaLinux:8Judy1.0.5-18.module_el8.6.0+2867+72759d2fALSA-2023:5259
AlmaLinux:8Judy1.0.5-18.module_el8.6.0+3139+3c630e87ALSA-2023:5683
AlmaLinux:8Judy1.0.5-18.module_el8.6.0+3072+3c630e87ALSA-2023:5683
AlmaLinux:8galera25.3.37-1.module_el8.8.0+3609+204d4ab0ALSA-2023:5259
AlmaLinux:8galera26.4.14-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:9galera26.4.14-1.el9_2.alma.1ALSA-2023:5684
AlmaLinux:8mariadb3:10.5.22-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:8mariadb3:10.3.39-1.module_el8.8.0+3609+204d4ab0ALSA-2023:5259
AlmaLinux:9mariadb3:10.5.22-1.el9_2.alma.1ALSA-2023:5684
AlmaLinux:8mariadb-backup3:10.3.39-1.module_el8.8.0+3609+204d4ab0ALSA-2023:5259
AlmaLinux:8mariadb-backup3:10.5.22-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:9mariadb-backup3:10.5.22-1.el9_2.alma.1ALSA-2023:5684
AlmaLinux:8mariadb-common3:10.3.39-1.module_el8.8.0+3609+204d4ab0ALSA-2023:5259
AlmaLinux:8mariadb-common3:10.5.22-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:9mariadb-common3:10.5.22-1.el9_2.alma.1ALSA-2023:5684
AlmaLinux:8mariadb-devel3:10.5.22-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:8mariadb-devel3:10.3.39-1.module_el8.8.0+3609+204d4ab0ALSA-2023:5259
AlmaLinux:9mariadb-devel3:10.5.22-1.el9_2.alma.1ALSA-2023:5684
AlmaLinux:8mariadb-embedded3:10.3.39-1.module_el8.8.0+3609+204d4ab0ALSA-2023:5259
AlmaLinux:8mariadb-embedded3:10.5.22-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:9mariadb-embedded3:10.5.22-1.el9_2.alma.1ALSA-2023:5684
AlmaLinux:8mariadb-embedded-devel3:10.5.22-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:8mariadb-embedded-devel3:10.3.39-1.module_el8.8.0+3609+204d4ab0ALSA-2023:5259
AlmaLinux:9mariadb-embedded-devel3:10.5.22-1.el9_2.alma.1ALSA-2023:5684
AlmaLinux:8mariadb-errmsg3:10.3.39-1.module_el8.8.0+3609+204d4ab0ALSA-2023:5259
AlmaLinux:8mariadb-errmsg3:10.5.22-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:9mariadb-errmsg3:10.5.22-1.el9_2.alma.1ALSA-2023:5684
AlmaLinux:8mariadb-gssapi-server3:10.5.22-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:8mariadb-gssapi-server3:10.3.39-1.module_el8.8.0+3609+204d4ab0ALSA-2023:5259
AlmaLinux:9mariadb-gssapi-server3:10.5.22-1.el9_2.alma.1ALSA-2023:5684
AlmaLinux:8mariadb-oqgraph-engine3:10.5.22-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:8mariadb-oqgraph-engine3:10.3.39-1.module_el8.8.0+3609+204d4ab0ALSA-2023:5259
AlmaLinux:9mariadb-oqgraph-engine3:10.5.22-1.el9_2.alma.1ALSA-2023:5684
AlmaLinux:8mariadb-pam3:10.5.22-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:9mariadb-pam3:10.5.22-1.el9_2.alma.1ALSA-2023:5684
AlmaLinux:8mariadb-server3:10.3.39-1.module_el8.8.0+3609+204d4ab0ALSA-2023:5259
AlmaLinux:8mariadb-server3:10.5.22-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:9mariadb-server3:10.5.22-1.el9_2.alma.1ALSA-2023:5684
AlmaLinux:8mariadb-server-galera3:10.3.39-1.module_el8.8.0+3609+204d4ab0ALSA-2023:5259
AlmaLinux:8mariadb-server-galera3:10.5.22-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:9mariadb-server-galera3:10.5.22-1.el9_2.alma.1ALSA-2023:5684
AlmaLinux:8mariadb-server-utils3:10.3.39-1.module_el8.8.0+3609+204d4ab0ALSA-2023:5259
AlmaLinux:8mariadb-server-utils3:10.5.22-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:9mariadb-server-utils3:10.5.22-1.el9_2.alma.1ALSA-2023:5684
AlmaLinux:8mariadb-test3:10.3.39-1.module_el8.8.0+3609+204d4ab0ALSA-2023:5259
AlmaLinux:8mariadb-test3:10.5.22-1.module_el8.8.0+3620+5d452900ALSA-2023:5683
AlmaLinux:9mariadb-test3:10.5.22-1.el9_2.alma.1ALSA-2023:5684
Debian:12mariadb1:10.11.3-1DEBIAN-CVE-2022-47015
Debian:13mariadb1:10.11.3-1DEBIAN-CVE-2022-47015
Debian:14mariadb1:10.11.3-1DEBIAN-CVE-2022-47015
Rocky Linux:8Judy0:1.0.5-18.module+el8.4.0+431+26aaed18RLSA-2023:5259
Rocky Linux:8Judy0:1.0.5-18.module+el8.4.0+427+adf35707RLSA-2023:5683
Rocky Linux:8Judy0:1.0.5-18.module+el8.4.0+427+adf35707RLSA-2023:5259
Rocky Linux:8Judy0:1.0.5-18.module+el8.10.0+1674+fa55eae9RLSA-2023:5259
Rocky Linux:8Judy0:1.0.5-18.module+el8.10.0+1925+356c22e8RLSA-2023:5259
Rocky Linux:8galera0:26.4.14-1.module+el8.8.0+1490+31c52b1fRLSA-2023:5683
Rocky Linux:8galera0:25.3.37-1.module+el8.8.0+1452+2a7eab68RLSA-2023:5259
Rocky Linux:8mariadb3:10.5.22-1.module+el8.8.0+1490+31c52b1fRLSA-2023:5683
Rocky Linux:8mariadb3:10.3.39-1.module+el8.8.0+1452+2a7eab68RLSA-2023:5259
Ubuntu:22.04:LTSmariadb-10.61:10.6.16-0ubuntu0.22.04.1USN-6600-1
Ubuntu:22.04:LTSmariadb-10.61:10.6.16-0ubuntu0.22.04.1UBUNTU-CVE-2022-47015

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References