554 matches found
CVE-2022-31621
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dsxbstream.cc, when an error occurs streamctxt-destfile == NULL while executing the method xbstreamopen, the held lock is not released correctly, which allows local users to trigger a denial of service due to the...
CVE-2022-31621
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dsxbstream.cc, when an error occurs streamctxt-destfile == NULL while executing the method xbstreamopen, the held lock is not released correctly, which allows local users to trigger a denial of service due to the...
CVE-2022-31623
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs i.e., going to the err label while executing the method createworkerthreads, the held lock thd-ctrlmutex is not released correctly, which allows local users to trigger a denial ...
CVE-2022-31624
Disclaimer: This data contains information about vulnerable...
CVE-2022-31624
CVE-2022-31624 — MariaDB Server : Affects MariaDB Server before 10.7. The issue stems from log_statement_ex in plugin/server_audit.c where the lock_bigbuffer is not released, enabling local users to trigger a denial-of-service via a deadlock. Connected advisories confirm the same vulnerability cl...
CVE-2022-31624: Improper Locking
MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/serveraudit/serveraudit.c method logstatementex, the held lock lockbigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock...
CVE-2022-31622: Improper Locking
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs pthreadcreate returns a nonzero value while executing the method createworkerthreads, the held lock is not released correctly, which allows local users to trigger a denial of...
CVE-2022-31623: Improper Locking
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs i.e., going to the err label while executing the method createworkerthreads, the held lock thd-ctrlmutex is not released correctly, which allows local users to trigger a denial ...
CVE-2022-31622
Removed by vendor...
CVE-2022-31623
Removed by vendor...
CVE-2022-31621
Disclaimer: This data contains information about vulnerable...
CVE-2022-31622
CVE-2022-31622 affects MariaDB Server before 10.7. The issue is an improper locking bug in extra/mariabackup/ds_compress.cc where, when errors occur during create_worker_threads (including when pthread_create fails or an error path goes to the err label), the held lock is not released, enabling a...
CVE-2022-31623
CVE-2022-31623 affects MariaDB Server prior to 10.7. In extra/mariabackup/ds_compress.cc, when an error occurs during create_worker_threads, thd->ctrl_mutex is not released, allowing a local DoS via deadlock. The vendor characterizes this as an improper locking bug with no adverse effects. Adv...
CVE-2022-31621: Improper Locking
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dsxbstream.cc, when an error occurs streamctxt-destfile == NULL while executing the method xbstreamopen, the held lock is not released correctly, which allows local users to trigger a denial of service due to the...
Slackware Linux 15.0 / current mariadb Multiple Vulnerabilities (SSA:2022-141-01)
The version of mariadb installed on the remote host is prior to 10.5.16 / 10.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-141-01 advisory. New mariadb packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted...
mariadb: DoS due to improper locking due to unreleased lock in plugin/server_audit/server_audit.c
MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/serveraudit/serveraudit.c method logstatementex, the held lock lockbigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock...
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.
...
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c.
...