MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dsxbstream.cc, when an error occurs (streamctxt->destfile == NULL) while executing the method xbstreamopen, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
{
"isDisputed": true
}[
{
"signature_type": "Function",
"target": {
"function": "xbstream_open",
"file": "extra/mariabackup/ds_xbstream.cc"
},
"id": "CVE-2022-31621-658f461a",
"digest": {
"function_hash": "233059734358559211299288846435812335016",
"length": 1007.0
},
"signature_version": "v1",
"source": "https://github.com/mariadb/server/commit/b1351c15946349f9daa7e5297fb2ac6f3139e4a8",
"deprecated": false
},
{
"signature_type": "Line",
"target": {
"file": "extra/mariabackup/ds_xbstream.cc"
},
"id": "CVE-2022-31621-cc00cf28",
"digest": {
"line_hashes": [
"167890560750701249489896219944202062762",
"268209796903344293356828286368688664967",
"169090813138370863555020065431270480309",
"337301460284207515514171628811139409466",
"224285923433873354564135012931937624238",
"12574186095871248775478581113365792649",
"260444992083677766809408272545037606041",
"186684390169372545720783369881229367474",
"253902093367623374329398104205023669406",
"245165555784708798433836005376697887396",
"281626662535726214097872739291335754844"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/mariadb/server/commit/b1351c15946349f9daa7e5297fb2ac6f3139e4a8",
"deprecated": false
}
]