CVE-2022-27379

Name of the Vulnerable Software and Affected Versions MariaDB Server versions 10.6.2 and below

Description An issue in the component Arg comparator::compare real fixed was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. The vulnerability is related to the lack of protection measures for the SQL query structure, which can be exploited by a remote attacker to cause a denial of service using a specially crafted SQL request.

Recommendations For MariaDB Server versions 10.6.2 and below, consider disabling the Arg comparator::compare real fixed component as a temporary workaround until a patch is available. Restrict access to specially crafted SQL statements to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.