Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-32084

27
FAUCET Score

CVE-2022-32084 is a segmentation fault vulnerability affecting MariaDB versions 10.2 through 10.7, specifically within the sub_select component. This vulnerability carries a CVSS score of 7.5 (HIGH), indicating it can be exploited remotely with low complexity and no user interaction, leading to high availability impact. Despite its severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
>= 10.3.0, < 10.3.36CPE matchmatch criteria
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
>= 10.4.0, < 10.4.26CPE matchmatch criteria
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
>= 10.5.0, < 10.5.17CPE matchmatch criteria
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
>= 10.6.0, < 10.6.9CPE matchmatch criteria
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
>= 10.7.0, < 10.7.5CPE matchmatch criteria
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.00%
Probability of exploitation in next 30 days
EPSS Percentile
78.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0200 is in the 62nd percentile among its peer group of 51,551 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (11)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: mariadb:10.3-8080020230814130040.63b34585
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: mariadb:10.5-8080020231003163755.63b34585
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: mariadb:10.5-8040020231006044227.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: mariadb:10.5-8040020231006044227.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: mariadb:10.5-8040020231006044227.522a0ee4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: mariadb:10.5-8060020231005052631.ad008a3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: mariadb-3:10.5.22-1.el9_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: galera-0:26.4.14-1.el9_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: mariadb-3:10.5.22-1.el9_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-mariadb105-mariadb-3:10.5.22-1.el7
View patch
redhatend of lifevia redhat_api
Product: Red Hat Software CollectionsFixed in: rh-mariadb103-mariadb

Vendor Advisories (1)

redhatCVE-2022-32084Moderate

mariadb: segmentation fault via the component sub_select

Aug 19, 2021

References

jira.mariadb.org / browse/MDEV-26427
ExploitIssue TrackingThird Party Advisory
lists.debian.org / debian-lts-announce/2022/09/msg00023.html
Mailing ListThird Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/WCOEGSVMIEXDZHBOSV6WVF7FAVRBR2JE
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/WTVAONAZXJFGHAJ4RP2OF3EAMQCOTDSQ
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY
security.netapp.com / advisory/ntap-20220818-0005
Third Party Advisory