vulnerability

Red Hat: CVE-2022-31623: CVE-2022-31623 mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (Multiple Advisories)

Try Surface Command
Back to search
Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:P)
Published
2022-05-25
Added
2022-08-03
Modified
2025-03-21

Description

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

Solution(s)

redhat-upgrade-galeraredhat-upgrade-galera-debuginforedhat-upgrade-galera-debugsourceredhat-upgrade-judyredhat-upgrade-judy-debuginforedhat-upgrade-judy-debugsourceredhat-upgrade-mariadbredhat-upgrade-mariadb-backupredhat-upgrade-mariadb-backup-debuginforedhat-upgrade-mariadb-commonredhat-upgrade-mariadb-debuginforedhat-upgrade-mariadb-debugsourceredhat-upgrade-mariadb-develredhat-upgrade-mariadb-embeddedredhat-upgrade-mariadb-embedded-debuginforedhat-upgrade-mariadb-embedded-develredhat-upgrade-mariadb-errmsgredhat-upgrade-mariadb-gssapi-serverredhat-upgrade-mariadb-gssapi-server-debuginforedhat-upgrade-mariadb-oqgraph-engineredhat-upgrade-mariadb-oqgraph-engine-debuginforedhat-upgrade-mariadb-pamredhat-upgrade-mariadb-pam-debuginforedhat-upgrade-mariadb-serverredhat-upgrade-mariadb-server-debuginforedhat-upgrade-mariadb-server-galeraredhat-upgrade-mariadb-server-utilsredhat-upgrade-mariadb-server-utils-debuginforedhat-upgrade-mariadb-testredhat-upgrade-mariadb-test-debuginforedhat-upgrade-mysql-selinux

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today