{
  "fix": "mariadb-plugin-gssapi-client 1:10.6.11-0ubuntu0.22.04.1",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-mariadb-plugin-gssapi-client-1-10.6.11-0ubuntu0.22.04.1",
  "summary": "mariadb-plugin-gssapi-client 1:10.6.11-0ubuntu0.22.04.1, released August 27, 2022, fixes 37 CVEs in mariadb-plugin-gssapi-client. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "package",
  "title": "mariadb-plugin-gssapi-client 1:10.6.11-0ubuntu0.22.04.1 for Ubuntu 22.04.1 LTS (jammy)",
  "released": "2022-08-27T13:15:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2018-25032, high severity",
  "supported": true,
  "cveCount": 37,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.51733,
  "maxCvss": 8.2,
  "appliesTo": [
    {
      "product": "mariadb-plugin-gssapi-client",
      "productUrl": "https://patchblox.com/security/product/linux/mariadb-plugin-gssapi-client",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1:10.6.11-0ubuntu0.22.04.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2018-25032",
      "url": "https://patchblox.com/security/cve/CVE-2018-25032",
      "title": "Python 3.8 and 4 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.2,
      "epss": 0.51733,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27387",
      "url": "https://patchblox.com/security/cve/CVE-2022-27387",
      "title": "galera: ELSA-2022-5826: mariadb:10.5 security, bug fix, and enhancement update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02458,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-46669",
      "url": "https://patchblox.com/security/cve/CVE-2021-46669",
      "title": "galera: ELSA-2022-5826: mariadb:10.5 security, bug fix, and enhancement update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02423,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27378",
      "url": "https://patchblox.com/security/cve/CVE-2022-27378",
      "title": "galera: ELSA-2022-5826: mariadb:10.5 security, bug fix, and enhancement update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32091",
      "url": "https://patchblox.com/security/cve/CVE-2022-32091",
      "title": "galera: ELSA-2023-5683: mariadb:10.5 security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.02367,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27377",
      "url": "https://patchblox.com/security/cve/CVE-2022-27377",
      "title": "galera: ELSA-2022-5826: mariadb:10.5 security, bug fix, and enhancement update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02337,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32084",
      "url": "https://patchblox.com/security/cve/CVE-2022-32084",
      "title": "galera: ELSA-2023-5683: mariadb:10.5 security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.02276,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27379",
      "url": "https://patchblox.com/security/cve/CVE-2022-27379",
      "title": "mariadb-plugin-gssapi-client: An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to al...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.02264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27380",
      "url": "https://patchblox.com/security/cve/CVE-2022-27380",
      "title": "galera: ELSA-2022-5826: mariadb:10.5 security, bug fix, and enhancement update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27386",
      "url": "https://patchblox.com/security/cve/CVE-2022-27386",
      "title": "mariadb-server-core-10.3: MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.02264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27447",
      "url": "https://patchblox.com/security/cve/CVE-2022-27447",
      "title": "galera: ELSA-2022-5826: mariadb:10.5 security, bug fix, and enhancement update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27449",
      "url": "https://patchblox.com/security/cve/CVE-2022-27449",
      "title": "galera: ELSA-2022-5826: mariadb:10.5 security, bug fix, and enhancement update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02229,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32081",
      "url": "https://patchblox.com/security/cve/CVE-2022-32081",
      "title": "libmariadb3: MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innob...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.02212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27376",
      "url": "https://patchblox.com/security/cve/CVE-2022-27376",
      "title": "libmariadbd19: MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, wh...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.02199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32089",
      "url": "https://patchblox.com/security/cve/CVE-2022-32089",
      "title": "galera: ELSA-2023-5683: mariadb:10.5 security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.02194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27381",
      "url": "https://patchblox.com/security/cve/CVE-2022-27381",
      "title": "galera: ELSA-2022-5826: mariadb:10.5 security, bug fix, and enhancement update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27384",
      "url": "https://patchblox.com/security/cve/CVE-2022-27384",
      "title": "galera: ELSA-2022-5826: mariadb:10.5 security, bug fix, and enhancement update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27452",
      "url": "https://patchblox.com/security/cve/CVE-2022-27452",
      "title": "galera: ELSA-2022-5826: mariadb:10.5 security, bug fix, and enhancement update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27445",
      "url": "https://patchblox.com/security/cve/CVE-2022-27445",
      "title": "galera: ELSA-2022-5826: mariadb:10.5 security, bug fix, and enhancement update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27448",
      "url": "https://patchblox.com/security/cve/CVE-2022-27448",
      "title": "galera: ELSA-2022-5826: mariadb:10.5 security, bug fix, and enhancement update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27383",
      "url": "https://patchblox.com/security/cve/CVE-2022-27383",
      "title": "galera: ELSA-2022-5826: mariadb:10.5 security, bug fix, and enhancement update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.0213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27456",
      "url": "https://patchblox.com/security/cve/CVE-2022-27456",
      "title": "mariadb-plugin-mroonga: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.02125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32082",
      "url": "https://patchblox.com/security/cve/CVE-2022-32082",
      "title": "mariadb-server: MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-\u0026gt;get_ref_count() == 0 in dict0dict.cc.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.02109,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32085",
      "url": "https://patchblox.com/security/cve/CVE-2022-32085",
      "title": "galera: ELSA-2022-6443: mariadb:10.3 security and bug fix update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32088",
      "url": "https://patchblox.com/security/cve/CVE-2022-32088",
      "title": "galera: ELSA-2022-6443: mariadb:10.3 security and bug fix update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32083",
      "url": "https://patchblox.com/security/cve/CVE-2022-32083",
      "title": "galera: ELSA-2022-6443: mariadb:10.3 security and bug fix update (MODERATE)",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.02007,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21427",
      "url": "https://patchblox.com/security/cve/CVE-2022-21427",
      "title": "libmysqlclient21: Vulnerability in the MySQL Server product of Oracle MySQL (component:Server: FTS)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.01996,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32087",
      "url": "https://patchblox.com/security/cve/CVE-2022-32087",
      "title": "libmariadb3: MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.01788,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27451",
      "url": "https://patchblox.com/security/cve/CVE-2022-27451",
      "title": "galera: mariadb: crash via window function in expression in ORDER BY",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.01663,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27457",
      "url": "https://patchblox.com/security/cve/CVE-2022-27457",
      "title": "libmariadbd19: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /str...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.01663,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27446",
      "url": "https://patchblox.com/security/cve/CVE-2022-27446",
      "title": "galera: mariadb: crash when using HAVING with IS NULL predicate in an equality",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.01579,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27455",
      "url": "https://patchblox.com/security/cve/CVE-2022-27455",
      "title": "mariadb: mariadb: use-after-free when WHERE has subquery with an outer reference in HAVING",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.01564,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32086",
      "url": "https://patchblox.com/security/cve/CVE-2022-32086",
      "title": "mariadb-backup: MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.0156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27382",
      "url": "https://patchblox.com/security/cve/CVE-2022-27382",
      "title": "mariadb-test: mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.01546,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27444",
      "url": "https://patchblox.com/security/cve/CVE-2022-27444",
      "title": "galera: mariadb: crash when using HAVING with NOT EXIST predicate in an equality",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.01485,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-38791",
      "url": "https://patchblox.com/security/cve/CVE-2022-38791",
      "title": "galera: ELSA-2023-5683: mariadb:10.5 security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00253,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-27458",
      "url": "https://patchblox.com/security/cve/CVE-2022-27458",
      "title": "libmariadb3: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-13T20:04:13Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}