High severity7.5NVD Advisory· Published Apr 12, 2022· Updated Jun 17, 2026

CVE-2022-27385

Description

An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

osv-coords3 versions
pkg:bitnami/mariadb pkg:bitnami/mysql-client pkg:bitnami/mariadb-min
< 10.3.32+ 2 more
- (no CPE)range: < 10.3.32
- (no CPE)range: < 10.3.32
- (no CPE)range: < 10.3.32
MariaDB/MariaDB Serverdescription
MariaDB/MariaDBllm-fuzzy2 versions
<=10.7+ 1 more
- (no CPE)range: <=10.7
- cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*range: <10.3.32

Patches

Vulnerability mechanics

References

jira.mariadb.org/browse/MDEV-26415nvdExploitIssue TrackingVendor Advisory
security.netapp.com/advisory/ntap-20220526-0008/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000