mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs i.e., going to the err label while executing the method createworkerthreads, the held lock thd-ctrlmutex is not released correctly, which allows local users to trigger a denial ...

Fedora: Security Advisory for golang-starlark (FEDORA-2022-3e1ade35db)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

MariaDB create_worker_threads DoS

The vulnerability of the createworkerthreads method in the MariaDB database management system exists due to improper cleanup or resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

MariaDB create_worker_threads DoS

The vulnerability of the createworkerthreads method in the MariaDB database management system exists due to improper cleanup or resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads the held lock is not released correctly which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

...

MariaDB security vulnerabilities

MariaDB is the database management system of the Mariadb Foundation and a version of the MySQL branch that uses the Maria storage engine. a denial of service vulnerability exists in versions of MariaDB Server prior to 10.7, which originates in extra/mariabackup/dscompress.cc, and can be exploited...

new packages: perl-threads-shared

An update is available for perl-threads-shared. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rock...

new packages: perl-threads

An update is available for perl-threads. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

GHSA-9785-W233-X6HV Improper Resource Shutdown or Release in Apache Tomcat

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection that were currently waiting for a WINDOWUPDATE before allowing the application to write more data. These waiting streams each...

USN-5399-1: libvirt vulnerabilities

It was discovered that libvirt incorrectly handled certain locking operations. A local attacker could possibly use this issue to cause libvirt to stop accepting connections, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. CVE-2021-3667 It was discovered that libvirt...

Apache Tomcat DoS Via Requests Including Null Characters

Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service resource exhaustion via a large number of requests to the server with null characters, which causes the working threads to hang...

PT-2022-3697

Name of the Vulnerable Software and Affected Versions Red Base Database affected versions not specified Description The issue is related to improper resource locking in the database management system. It can be exploited by a remote attacker to cause a denial of service by opening a specially...

GSD-2022-1001983 NFS: Avoid writeback threads getting stuck in mempool_alloc()

NFS: Avoid writeback threads getting stuck in mempoolalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...

GSD-2022-1001694 NFS: Avoid writeback threads getting stuck in mempool_alloc()

NFS: Avoid writeback threads getting stuck in mempoolalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

GSD-2022-1001368 NFS: Avoid writeback threads getting stuck in mempool_alloc()

NFS: Avoid writeback threads getting stuck in mempoolalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

GSD-2022-1001025 NFS: Avoid writeback threads getting stuck in mempool_alloc()

NFS: Avoid writeback threads getting stuck in mempoolalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

PT-2022-29641

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue affects the NFS component, where writeback threads can get stuck in mempool alloc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-30256

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to NFS, where writeback threads can get stuck in mempool alloc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29298

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to NFS, where writeback threads can get stuck in mempool alloc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-29967

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to NFS, where writeback threads can get stuck in mempool alloc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...