CVE-2022-31621

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dsxbstream.cc, when an error occurs (streamctxt->destfile == NULL) while executing the method xbstreamopen, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

References

Affected packages

Git / github.com/mariadb/server

Affected ranges

Type: GIT
Repo: https://github.com/mariadb/server
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

b1351c15946349f9daa7e5297fb2ac6f3139e4a8

Introduced

1a647b700f6b72dc97211510a5d0c647d5d3d911

Fixed

109fc67d4da46d52d2a96528eaea3b0ef6275692

Introduced

20ae591abd0bfe1bfaee546989ee163f4ef832b1

Fixed

a2f147af35480e27bd599462db59b9b95f71acd9

Introduced

7c7f9bef28aa566557da31402142f6dd8298ddd2

Fixed

8635be6a2962f8e256c27836c35064ccaabb7486

Introduced

c761b43451d54eeeecdf3c102906fcce88d4e9d9

Fixed

a19ab67318760f8f155ef7f4f821dfc738542c67

Affected versions

mariadb-10.*

mariadb-10.2.38

mariadb-10.2.39

mariadb-10.2.40

mariadb-10.6.0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-31621.json"

vanir_signatures

[
    {
        "target": {
            "file": "extra/mariabackup/ds_xbstream.cc",
            "function": "xbstream_open"
        },
        "digest": {
            "length": 1007.0,
            "function_hash": "233059734358559211299288846435812335016"
        },
        "signature_type": "Function",
        "id": "CVE-2022-31621-658f461a",
        "source": "https://github.com/mariadb/server/commit/b1351c15946349f9daa7e5297fb2ac6f3139e4a8",
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "extra/mariabackup/ds_xbstream.cc"
        },
        "digest": {
            "line_hashes": [
                "167890560750701249489896219944202062762",
                "268209796903344293356828286368688664967",
                "169090813138370863555020065431270480309",
                "337301460284207515514171628811139409466",
                "224285923433873354564135012931937624238",
                "12574186095871248775478581113365792649",
                "260444992083677766809408272545037606041",
                "186684390169372545720783369881229367474",
                "253902093367623374329398104205023669406",
                "245165555784708798433836005376697887396",
                "281626662535726214097872739291335754844"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "id": "CVE-2022-31621-cc00cf28",
        "source": "https://github.com/mariadb/server/commit/b1351c15946349f9daa7e5297fb2ac6f3139e4a8",
        "deprecated": false,
        "signature_version": "v1"
    }
]