CVE-2022-27383: 
MariaDB Server vulnerability analysis and mitigation

MariaDB Server v10.6 and below contains a use-after-free vulnerability in the component mystrcasecmp8bit (CVE-2022-27383), which can be exploited through specially crafted SQL statements. The vulnerability was discovered in March 2022 and publicly disclosed in April 2022, affecting multiple versions of MariaDB including 10.2, 10.3, 10.4, 10.5, and 10.6 (MariaDB Bug).

The vulnerability is a use-after-free issue in the mystrcasecmp8bit component that can be triggered via specially crafted SQL statements. The CVSS 3.1 base score for this vulnerability is 7.5 (High), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The vulnerability affects the string comparison functionality in MariaDB's core components (NetApp Advisory).

Successful exploitation of this vulnerability could lead to a Denial of Service (DoS) condition. The vulnerability has a High severity rating with specific impact on system availability, while confidentiality and integrity remain unaffected (Ubuntu Security).

The vulnerability has been fixed in MariaDB versions 10.2.44, 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4, and 10.8.3. Users are advised to upgrade to these or later versions to address the vulnerability (Debian Security).