CVE-2022-27378: 
MariaDB Server vulnerability analysis and mitigation

An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered that allows attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. The vulnerability was discovered in March 2022 and assigned CVE-2022-27378 (CVE Mitre, NVD).

The vulnerability exists in the Createtmptable::finalize component of MariaDB Server and can be triggered through specially crafted SQL statements involving temporary table creation. The issue has been assigned a CVSS v3.1 score of 7.5 (HIGH) with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating a high severity vulnerability with network accessibility and no required privileges or user interaction (NetApp Advisory).

Successful exploitation of this vulnerability could lead to a Denial of Service (DoS) condition in affected MariaDB Server installations, potentially disrupting database operations and service availability (NetApp Advisory).

The vulnerability has been fixed in multiple MariaDB versions including 10.2.44, 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4, 10.8.3, and 10.9.1. Users are advised to upgrade to these patched versions to mitigate the vulnerability (MariaDB Jira, Debian Security).