CVE-2022-31621: Medium severity mariadb server vulnerability
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dsxbstream.cc, when an error occurs (streamctxt->destfile == NULL) while executing the method xbstreamopen, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-31621?
CVE-2022-31621 is a vulnerability in MariaDB Server before 10.7 that allows local users to trigger a denial of service due to a lock not being released correctly.
How severe is CVE-2022-31621?
CVE-2022-31621 has a severity rating of 5.5 (medium).
Which software versions are affected by CVE-2022-31621?
Versions 10.2.41, 10.3.0 to 10.3.32, 10.4.0 to 10.4.22, 10.5.0 to 10.5.13, and 10.6.0 to 10.6.5 of Mariadb Server are affected by CVE-2022-31621.
How do I fix CVE-2022-31621?
Upgrade Mariadb Server to version 10.7 or later to fix CVE-2022-31621. Alternatively, you can apply the patch provided in the reference links.
Where can I find more information about CVE-2022-31621?
You can find more information about CVE-2022-31621 in the reference links: [1], [2], [3].