Vulnerability Name: | CVE-2022-31623 (CCN-227322) | ||||||||||||||||||
Assigned: | 2021-09-07 | ||||||||||||||||||
Published: | 2021-09-07 | ||||||||||||||||||
Updated: | 2022-11-05 | ||||||||||||||||||
Summary: | MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. | ||||||||||||||||||
CVSS v3 Severity: | 5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) 4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
4.8 Medium (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
| ||||||||||||||||||
CVSS v2 Severity: | 2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
| ||||||||||||||||||
Vulnerability Type: | CWE-667 | ||||||||||||||||||
Vulnerability Consequences: | Denial of Service | ||||||||||||||||||
References: | Source: MITRE Type: CNA CVE-2022-31623 Source: XF Type: UNKNOWN mariadb-cve202231623-dos(227322) Source: MISC Type: Patch, Third Party Advisory https://github.com/MariaDB/server/commit/7c30bc38a588b22b01f11130cfe99e7f36accf94 Source: CCN Type: MariaDB GIT Repository MDEV-26561 Fix a bug due to unreleased lock #1938 Source: MISC Type: Patch, Third Party Advisory https://github.com/MariaDB/server/pull/1938 Source: CONFIRM Type: Third Party Advisory https://security.netapp.com/advisory/ntap-20220707-0006/ Source: CCN Type: Mend Vulnerability Database CVE-2022-31623 | ||||||||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration RedHat 1: Configuration RedHat 2: Configuration RedHat 3: Configuration RedHat 4: Configuration RedHat 5: Denotes that component is vulnerable | ||||||||||||||||||
Oval Definitions | |||||||||||||||||||
| |||||||||||||||||||
BACK |