Bugzilla – Bug 1207404
VUL-0: CVE-2022-47015: mariadb-100,mariadb: Null pointer dereference in spider_db_mbase:print_warnings
Last modified: 2024-05-03 09:57:11 UTC
CVE-2022-47015 MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-47015 https://www.cve.org/CVERecord?id=CVE-2022-47015 https://github.com/MariaDB/server/commit/be0a46b3d52b58956fd0d47d040b9f4514406954
This security issue has been fixed in the latest mariadb releases. It will get to SLE and TW with the next submissions.
SUSE-SU-2023:2479-1: An update that solves one vulnerability can now be installed. Category: security (low) Bug References: 1207404 CVE References: CVE-2022-47015 Sources used: SUSE Package Hub 15 15-SP4 (src): mariadb-10.6.13-150400.3.23.1 SUSE Package Hub 15 15-SP5 (src): mariadb-10.6.13-150400.3.23.1 Server Applications Module 15-SP4 (src): mariadb-10.6.13-150400.3.23.1 Server Applications Module 15-SP5 (src): mariadb-10.6.13-150400.3.23.1 Galera for Ericsson 15 SP4 (src): mariadb-10.6.13-150400.3.23.1 openSUSE Leap 15.4 (src): mariadb-10.6.13-150400.3.23.1 openSUSE Leap 15.5 (src): mariadb-10.6.13-150400.3.23.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:2478-1: An update that solves one vulnerability can now be installed. Category: security (low) Bug References: 1207404 CVE References: CVE-2022-47015 Sources used: SUSE Linux Enterprise Real Time 15 SP3 (src): mariadb-10.5.20-150300.3.28.1 Galera for Ericsson 15 SP3 (src): mariadb-10.5.20-150300.3.28.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:2478-2: An update that solves one vulnerability can now be installed. Category: security (low) Bug References: 1207404 CVE References: CVE-2022-47015 Sources used: SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src): mariadb-10.5.20-150300.3.28.1 SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (src): mariadb-10.5.20-150300.3.28.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src): mariadb-10.5.20-150300.3.28.1 SUSE Manager Proxy 4.2 (src): mariadb-10.5.20-150300.3.28.1 SUSE Manager Retail Branch Server 4.2 (src): mariadb-10.5.20-150300.3.28.1 SUSE Manager Server 4.2 (src): mariadb-10.5.20-150300.3.28.1 SUSE Enterprise Storage 7.1 (src): mariadb-10.5.20-150300.3.28.1 SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (src): mariadb-10.5.20-150300.3.28.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:2991-1: An update that solves one vulnerability can now be installed. Category: security (important) Bug References: 1207404 CVE References: CVE-2022-47015 Sources used: SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src): mariadb-10.5.21-150300.3.32.5 SUSE Linux Enterprise Real Time 15 SP3 (src): mariadb-10.5.21-150300.3.32.5 Galera for Ericsson 15 SP3 (src): mariadb-10.5.21-150300.3.32.5 SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (src): mariadb-10.5.21-150300.3.32.5 SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src): mariadb-10.5.21-150300.3.32.5 SUSE Manager Proxy 4.2 (src): mariadb-10.5.21-150300.3.32.5 SUSE Manager Retail Branch Server 4.2 (src): mariadb-10.5.21-150300.3.32.5 SUSE Manager Server 4.2 (src): mariadb-10.5.21-150300.3.32.5 SUSE Enterprise Storage 7.1 (src): mariadb-10.5.21-150300.3.32.5 SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (src): mariadb-10.5.21-150300.3.32.5 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:3712-1: An update that solves one vulnerability can now be installed. Category: security (low) Bug References: 1207404 CVE References: CVE-2022-47015 Sources used: SUSE Linux Enterprise Server for SAP Applications 15 SP2 (src): mariadb-10.4.31-150200.3.45.1 SUSE Enterprise Storage 7 (src): mariadb-10.4.31-150200.3.45.1 SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (src): mariadb-10.4.31-150200.3.45.1 SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (src): mariadb-10.4.31-150200.3.45.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
done, closing