MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.
References
| Link | Resource |
|---|---|
| https://github.com/MariaDB/server/commit/d627d00b13ab2f2c0954ea7b77202470cb102944 | Patch Third Party Advisory |
| https://jira.mariadb.org/browse/MDEV-26556?filter=-2 | Issue Tracking Permissions Required Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20220707-0006/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
08 Aug 2023, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-667 |
05 Nov 2022, 02:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20220707-0006/ - Third Party Advisory |
07 Jul 2022, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
28 May 2022, 02:40
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-404 | |
| References | (MISC) https://jira.mariadb.org/browse/MDEV-26556?filter=-2 - Issue Tracking, Permissions Required, Third Party Advisory | |
| References | (MISC) https://github.com/MariaDB/server/commit/d627d00b13ab2f2c0954ea7b77202470cb102944 - Patch, Third Party Advisory | |
| CPE | cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* | |
| First Time |
Mariadb
Mariadb mariadb |
|
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 5.5 |
25 May 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-05-25 21:15
Updated : 2023-12-10 14:22
NVD link : CVE-2022-31624
Mitre link : CVE-2022-31624
CVE.ORG link : CVE-2022-31624
JSON object : View
Products Affected
mariadb
- mariadb
CWE
CWE-667
Improper Locking