Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2022-32082: MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
CVE-2022-32082 · published 4 years ago
Summary
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
What to do
- Update mariadb to version 10.5.17-r0.
- Update mariadb to version 10.6.9-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | mariadb | mariadb |
>= 10.5.0, < 10.5.17 >= 10.6.0, < 10.6.9 >= 10.7.0, < 10.7.5 >= 10.8.0, < 10.8.4 >= 10.9.0, < 10.9.2 cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* |
| – | fedoraproject | fedora |
35 36 37 cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* |
| Alpine:v3.13 | – | mariadb |
>= 10.5.0, < 10.5.17-r0 Fix: upgrade to 10.5.17-r0
|
| Alpine:v3.15 | – | mariadb |
>= 10.5.0, < 10.6.9-r0 Fix: upgrade to 10.6.9-r0
|
Original advisory text
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
References
- https://jira.mariadb.org/browse/MDEV-26433 URL
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
- https://security.netapp.com/advisory/ntap-20220818-0005/ Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/32xxx/CVE-2022-32082... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-32082 Vendor Advisory
- https://security.alpinelinux.org/vuln/CVE-2022-32082 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-617Reachable Assertion
Timeline
Published1 Jul 2022
Updated4 Nov 2026
First seen29 Sep 2026
Track software like this
Free during beta