CVE-2022-31621

MariaDB Server before 10.7 is vulnerable to Denial of Service

Medium · published May 25, 2022

CVSS v3.1
5.3
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occurs (stream_ctxt->dest_file == NULL) while executing the method xbstream_open, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00223 · 12.2th percentile
Published
2022-05-25T00:00Z
EPSS history
Timeline
  • 25 MAY 00:00Z
    MariaDB Server before 10.7 is vulnerable to Denial of Service
    cvelistv5