Unrated severityNVD Advisory· Published May 25, 2022· Updated Oct 29, 2024
CVE-2022-31623
CVE-2022-31623
Description
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21- MariaDB/MariaDB Serverdescription
- osv-coords19 versionspkg:bitnami/mariadbpkg:bitnami/mariadb-minpkg:bitnami/mysql-clientpkg:rpm/almalinux/galerapkg:rpm/almalinux/Judypkg:rpm/almalinux/mariadbpkg:rpm/almalinux/mariadb-backuppkg:rpm/almalinux/mariadb-commonpkg:rpm/almalinux/mariadb-develpkg:rpm/almalinux/mariadb-embeddedpkg:rpm/almalinux/mariadb-embedded-develpkg:rpm/almalinux/mariadb-errmsgpkg:rpm/almalinux/mariadb-gssapi-serverpkg:rpm/almalinux/mariadb-oqgraph-enginepkg:rpm/almalinux/mariadb-pampkg:rpm/almalinux/mariadb-serverpkg:rpm/almalinux/mariadb-server-galerapkg:rpm/almalinux/mariadb-server-utilspkg:rpm/almalinux/mariadb-test
< 10.2.42+ 18 more
- (no CPE)range: < 10.2.42
- (no CPE)range: < 10.2.42
- (no CPE)range: < 10.2.42
- (no CPE)range: < 26.4.11-1.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 1.0.5-18.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.