MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dsxbstream.cc, when an error occurs (streamctxt->destfile == NULL) while executing the method xbstreamopen, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
{ "isDisputed": true }
{ "vanir_signatures": [ { "deprecated": false, "id": "CVE-2022-31621-658f461a", "signature_version": "v1", "digest": { "length": 1007.0, "function_hash": "233059734358559211299288846435812335016" }, "signature_type": "Function", "target": { "function": "xbstream_open", "file": "extra/mariabackup/ds_xbstream.cc" }, "source": "https://github.com/mariadb/server/commit/b1351c15946349f9daa7e5297fb2ac6f3139e4a8" }, { "deprecated": false, "id": "CVE-2022-31621-cc00cf28", "signature_version": "v1", "digest": { "line_hashes": [ "167890560750701249489896219944202062762", "268209796903344293356828286368688664967", "169090813138370863555020065431270480309", "337301460284207515514171628811139409466", "224285923433873354564135012931937624238", "12574186095871248775478581113365792649", "260444992083677766809408272545037606041", "186684390169372545720783369881229367474", "253902093367623374329398104205023669406", "245165555784708798433836005376697887396", "281626662535726214097872739291335754844" ], "threshold": 0.9 }, "signature_type": "Line", "target": { "file": "extra/mariabackup/ds_xbstream.cc" }, "source": "https://github.com/mariadb/server/commit/b1351c15946349f9daa7e5297fb2ac6f3139e4a8" } ] }