CVE-2022-27385: 
MariaDB Server vulnerability analysis and mitigation

An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. The vulnerability was assigned CVE-2022-27385 and was discovered in March 2022 (CVE Mitre). The affected systems include MariaDB Server versions up to and including 10.7, specifically impacting versions 10.5, 10.6, and 10.7 (MariaDB Jira).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue lies in the component Used_tables_and_const_cache::used_tables_and_const_cache_join and can be triggered through specially crafted SQL statements (NetApp Advisory, NVD).

When successfully exploited, this vulnerability can lead to a Denial of Service (DoS) condition in the affected MariaDB server installations. The attack can be executed remotely, requires low attack complexity, and does not require any privileges or user interaction (NetApp Advisory).

The vulnerability affects MariaDB Server versions up to and including 10.7. Users should upgrade to patched versions: 10.3.32, 10.4.22, 10.5.13, or 10.6.5 and above, depending on their current version track (Debian Security).