CVE-2022-31622

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-31622
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-31622.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-31622
Aliases
Downstream
Related
Published
2022-05-25T21:15:08.617Z
Modified
2026-03-20T12:06:12.781016Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs (pthreadcreate returns a nonzero value) while executing the method createworkerthreads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

References

Affected packages

Git / github.com/mariadb/server

Affected ranges

Type
GIT
Repo
https://github.com/mariadb/server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
e2b50213cf12623da31c8b49be4d40772876223c
Introduced
20ae591abd0bfe1bfaee546989ee163f4ef832b1
Fixed
41a163ac5ccf4ac5394edc84e40b3f47acea6b08
Introduced
c761b43451d54eeeecdf3c102906fcce88d4e9d9
Fixed
c04a203a10e282e1f33fd04d8a1b7ff0b076bce5
Introduced
7c7f9bef28aa566557da31402142f6dd8298ddd2
Fixed
ad3ac55641f18172807b13423353f01377f76e6e
Introduced
1a647b700f6b72dc97211510a5d0c647d5d3d911
Fixed
4ffffd98a5ac89b78954aaa2197b40850ade4191
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
cb1316b8d213aded32aa2c1a98271eede179146d
Fixed
e1eb39a446c30b8459c39fd7f2ee1c55a36e97d2
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "10.2.42"
        },
        {
            "introduced": "10.3.0"
        },
        {
            "fixed": "10.3.33"
        },
        {
            "introduced": "10.4.0"
        },
        {
            "fixed": "10.4.23"
        },
        {
            "introduced": "10.5.0"
        },
        {
            "fixed": "10.5.14"
        },
        {
            "introduced": "10.6.0"
        },
        {
            "fixed": "10.6.6"
        },
        {
            "introduced": "10.7.0"
        },
        {
            "fixed": "10.7.2"
        }
    ]
}

Affected versions

mariadb-10.*
mariadb-10.0.31
mariadb-10.0.32
mariadb-10.0.33
mariadb-10.0.34
mariadb-10.0.35
mariadb-10.0.36
mariadb-10.0.37
mariadb-10.0.38
mariadb-10.1.23
mariadb-10.1.24
mariadb-10.1.25
mariadb-10.1.26
mariadb-10.1.27
mariadb-10.1.28
mariadb-10.1.29
mariadb-10.1.30
mariadb-10.1.31
mariadb-10.1.32
mariadb-10.1.33
mariadb-10.1.34
mariadb-10.1.35
mariadb-10.1.36
mariadb-10.1.37
mariadb-10.1.38
mariadb-10.1.39
mariadb-10.1.40
mariadb-10.1.41
mariadb-10.1.42
mariadb-10.1.43
mariadb-10.1.44
mariadb-10.1.45
mariadb-10.1.46
mariadb-10.1.47
mariadb-10.2.10
mariadb-10.2.11
mariadb-10.2.12
mariadb-10.2.13
mariadb-10.2.14
mariadb-10.2.15
mariadb-10.2.16
mariadb-10.2.17
mariadb-10.2.18
mariadb-10.2.19
mariadb-10.2.20
mariadb-10.2.21
mariadb-10.2.22
mariadb-10.2.23
mariadb-10.2.24
mariadb-10.2.25
mariadb-10.2.26
mariadb-10.2.27
mariadb-10.2.28
mariadb-10.2.29
mariadb-10.2.30
mariadb-10.2.31
mariadb-10.2.32
mariadb-10.2.33
mariadb-10.2.34
mariadb-10.2.35
mariadb-10.2.36
mariadb-10.2.37
mariadb-10.2.38
mariadb-10.2.39
mariadb-10.2.40
mariadb-10.2.41
mariadb-10.2.6
mariadb-10.2.7
mariadb-10.2.8
mariadb-10.2.9
mariadb-10.3.0
mariadb-5.*
mariadb-5.5.55
mariadb-5.5.56
mariadb-5.5.57
mariadb-5.5.58
mariadb-5.5.59
mariadb-5.5.60
mariadb-5.5.61
mariadb-5.5.62
mariadb-5.5.63
mariadb-5.5.64
mariadb-5.5.65
mariadb-5.5.66
mariadb-5.5.67
mariadb-5.5.68
mariadb-galera-10.*
mariadb-galera-10.0.30
mariadb-galera-10.0.31
mariadb-galera-10.0.32
mariadb-galera-10.0.33
mariadb-galera-10.0.34
mariadb-galera-10.0.35
mariadb-galera-10.0.36
mariadb-galera-10.0.37
mariadb-galera-5.*
mariadb-galera-5.5.52
mariadb-galera-5.5.53
mariadb-galera-5.5.54
mariadb-galera-5.5.55
mariadb-galera-5.5.56
mariadb-galera-5.5.57
mariadb-galera-5.5.58
mariadb-galera-5.5.59
mariadb-galera-5.5.60
mariadb-galera-5.5.61
mariadb-galera-5.5.62
mysql-5.*
mysql-5.5.55
mysql-5.5.56
mysql-5.5.57
mysql-5.5.58
mysql-5.5.59
mysql-5.5.60
mysql-5.5.61
mysql-5.5.62

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-31622.json"
vanir_signatures 
[
    {
        "source": "https://github.com/mariadb/server/commit/e1eb39a446c30b8459c39fd7f2ee1c55a36e97d2",
        "id": "CVE-2022-31622-3bbab28d",
        "digest": {
            "length": 1089.0,
            "function_hash": "34880256977001026652841198765112081276"
        },
        "deprecated": false,
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "extra/mariabackup/ds_compress.cc",
            "function": "create_worker_threads"
        }
    },
    {
        "source": "https://github.com/mariadb/server/commit/e1eb39a446c30b8459c39fd7f2ee1c55a36e97d2",
        "id": "CVE-2022-31622-977866a5",
        "digest": {
            "line_hashes": [
                "196104405052072975430072880005732981250",
                "265736355112068905119830254268930035987",
                "279526020539492955557437763953817736959",
                "93008397167680912230812322073889978078"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_type": "Line",
        "signature_version": "v1",
        "target": {
            "file": "extra/mariabackup/ds_compress.cc"
        }
    }
]