CVE-2022-31624: Medium severity mariadb server vulnerability

Q: What is CVE-2022-31624?

CVE-2022-31624 is a vulnerability in MariaDB Server before 10.7 that allows local users to trigger a denial of service due to a deadlock.

Q: How severe is CVE-2022-31624?

CVE-2022-31624 has a severity rating of 5.5, which is considered medium.

Q: What software versions are affected by CVE-2022-31624?

MariaDB versions 10.2.41 to 10.6.5 on Apple macOS Monterey are affected by CVE-2022-31624.

Q: How can I fix CVE-2022-31624?

To fix CVE-2022-31624, users should update to MariaDB Server 10.7 or apply the relevant patches provided by MariaDB.

Q: Are there any references for CVE-2022-31624?

Yes, you can find references for CVE-2022-31624 in the following links: [link1], [link2], [link3].

Published May 25, 2022

Updated

MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/serveraudit/serveraudit.c method logstatementex, the held lock lockbigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.

Affected Software

5 affected components

MariaDB MariaDB<10.2.41

MariaDB MariaDB>=10.3.0<10.3.32

MariaDB MariaDB>=10.4.0<10.4.22

MariaDB MariaDB>=10.5.0<10.5.13

MariaDB MariaDB>=10.6.0<10.6.5

Remediation

Patch Available

https://github.com/MariaDB/server/commit/d627d00b13ab2f2c0954ea7b77202470cb102944

Event History

May 25, 2022

CVE Published

via MITRE·08:36 PM

Data Sourced

via MITRE·08:36 PM

Description

Frequently Asked Questions

What is CVE-2022-31624?

CVE-2022-31624 is a vulnerability in MariaDB Server before 10.7 that allows local users to trigger a denial of service due to a deadlock.

How severe is CVE-2022-31624?

CVE-2022-31624 has a severity rating of 5.5, which is considered medium.

What software versions are affected by CVE-2022-31624?