Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-38791
HistoryAug 27, 2022 - 12:00 a.m.

CVE-2022-38791

2022-08-2700:00:00
ubuntu.com
ubuntu.com
18
mariadb
compress_write
ds_compress.cc
data_mutex
stream write
deadlock
unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%

In MariaDB before 10.9.2, compress_write in
extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream
write failure, which allows local users to trigger a deadlock.

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchmariadb-10.0< anyUNKNOWN
ubuntu18.04noarchmariadb-10.1< anyUNKNOWN
ubuntu20.04noarchmariadb-10.3< 1:10.3.37-0ubuntu0.20.04.1UNKNOWN
ubuntu22.04noarchmariadb-10.6< 1:10.6.11-0ubuntu0.22.04.1UNKNOWN

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%