Unrated severityNVD Advisory· Published May 25, 2022· Updated Aug 3, 2024
CVE-2022-31622
CVE-2022-31622
Description
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
Affected products
20- MariaDB/MariaDB Serverdescription
- osv-coords19 versionspkg:bitnami/mariadbpkg:bitnami/mariadb-minpkg:bitnami/mysql-clientpkg:rpm/almalinux/galerapkg:rpm/almalinux/Judypkg:rpm/almalinux/mariadbpkg:rpm/almalinux/mariadb-backuppkg:rpm/almalinux/mariadb-commonpkg:rpm/almalinux/mariadb-develpkg:rpm/almalinux/mariadb-embeddedpkg:rpm/almalinux/mariadb-embedded-develpkg:rpm/almalinux/mariadb-errmsgpkg:rpm/almalinux/mariadb-gssapi-serverpkg:rpm/almalinux/mariadb-oqgraph-enginepkg:rpm/almalinux/mariadb-pampkg:rpm/almalinux/mariadb-serverpkg:rpm/almalinux/mariadb-server-galerapkg:rpm/almalinux/mariadb-server-utilspkg:rpm/almalinux/mariadb-test
< 10.2.42+ 18 more
- (no CPE)range: < 10.2.42
- (no CPE)range: < 10.2.42
- (no CPE)range: < 10.2.42
- (no CPE)range: < 26.4.11-1.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 1.0.5-18.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5News mentions
0No linked articles in our index yet.