NetSight
IP …
medium5.5

CVE-2022-38791

In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users …

Impact

In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.

Affected products

VendorProductAffected versions
MariadbMariadb
from 10.3.0 before 10.3.36
from 10.4.0 before 10.4.26
from 10.5.0 before 10.5.17
from 10.6.0 before 10.6.9
from 10.7.0 before 10.7.5
from 10.8.0 before 10.8.4
FedoraprojectFedora
Versions 35, 36, 37

Weakness classification

CWE-667

References