CVE-2022-27449: 
MariaDB Server vulnerability analysis and mitigation

MariaDB Server v10.9 and below contains a segmentation fault vulnerability in the component sql/item_func.cc:148. The vulnerability was discovered and reported on March 16, 2022, and was assigned CVE-2022-27449. This issue affects multiple versions of MariaDB Server up to version 10.9 (MITRE CVE, NVD).

The vulnerability is caused by a segmentation fault in the sql/itemfunc.cc file at line 148, specifically related to the Itemfunc::checkargumenttypeslikeargs0() function. The issue manifests when handling virtual columns with specific date and timestamp operations. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (High), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (NetApp Advisory).

When successfully exploited, this vulnerability can lead to a Denial of Service (DoS) condition through a segmentation fault in the MariaDB server. The vulnerability affects the availability of the system while having no impact on confidentiality or integrity (NetApp Advisory).

The vulnerability has been fixed in MariaDB versions 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4, and 10.8.3. Users are advised to upgrade to these or later versions. The fix was implemented through multiple commits in the MariaDB repository (Debian Tracker).