MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc when an error occurs (stream_ctxt->dest_file == NULL) while executing the method xbstream_open the held lock is not released correctly which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

🗓️ 28 May 2022 07:00:00Reported by MicrosoftType

MariaDB Server before 10.7 may cause DoS from improper locking in xbstream_open when file is NULL.

Reporter	Title	Published	Views	Family All 136
ATTACKERKB	CVE-2022-31621	25 May 202221:15	–	attackerkb
AlpineLinux	CVE-2022-31621	25 May 202200:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в mariadb-10.3	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the xbstream_open function in the MariaDB database management system allows a hacker to cause a service failure.	27 Jun 202200:00	–	bdu_fstec
CBLMariner	CVE-2022-31621 affecting package mariadb for versions less than 10.6.9-1	7 Sep 202219:51	–	cbl_mariner
CBLMariner	CVE-2022-31621 affecting package mariadb 10.3.34-1	15 Jun 202217:03	–	cbl_mariner
CNNVD	MariaDB 安全漏洞	25 May 202200:00	–	cnnvd
CNVD	MariaDB Server Denial of Service Vulnerability	26 May 202200:00	–	cnvd
CVE	CVE-2022-31621	25 May 202200:00	–	cve
Cvelist	CVE-2022-31621	25 May 202200:00	–	cvelist