CVE-2022-31623
- Source
- https://cve.org/CVERecord?id=CVE-2022-31623
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31623.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-31623
- Aliases
- Downstream
- Related
- Published
- 2022-05-25T21:15:08.657Z
- Modified
- 2026-02-24T08:21:18.574701Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs (i.e., going to the err label) while executing the method createworkerthreads, the held lock thd->ctrlmutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
- References
-
- https://jira.mariadb.org/browse/MDEV-26561
- https://jira.mariadb.org/browse/MDEV-26574
- https://github.com/MariaDB/server/commit/7c30bc38a588b22b01f11130cfe99e7f36accf94
- https://github.com/MariaDB/server/pull/1938
- https://security.netapp.com/advisory/ntap-20220707-0006/
- https://github.com/MariaDB/server/commit/7c30bc38a588b22b01f11130cfe99e7f36accf94
- https://github.com/MariaDB/server/pull/1938
Affected packages
Git / github.com/mariadb/server
Affected ranges
- Type
- GIT
- Repo
- https://github.com/mariadb/server
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixed
Database specific
vanir_signatures
[
{
"id": "CVE-2022-31623-415829a6",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"45736158323606631393843367927736220633",
"93471142310599807551645809224939903288",
"138029886734697127086017542047545411667",
"318526583337485113219599587800360140929"
]
},
"deprecated": false,
"source": "https://github.com/mariadb/server/commit/7c30bc38a588b22b01f11130cfe99e7f36accf94",
"signature_type": "Line",
"target": {
"file": "extra/mariabackup/ds_compress.cc"
}
},
{
"id": "CVE-2022-31623-5487115d",
"signature_version": "v1",
"digest": {
"function_hash": "198486781574490766518975046494396902027",
"length": 1124.0
},
"deprecated": false,
"source": "https://github.com/mariadb/server/commit/7c30bc38a588b22b01f11130cfe99e7f36accf94",
"signature_type": "Function",
"target": {
"file": "extra/mariabackup/ds_compress.cc",
"function": "create_worker_threads"
}
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31623.json"