Back to Database
Status published
Medium
CVE-2022-31624
MariaDB Server before 10.7 is vulnerable to Denial of Service....
Vulnerability Description
MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-31624
Credits & Attribution
No credits recorded in the NVD database.
References
More from mariadb
View All →CVE-2022-47015
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial...
Unknown
0
CVE-2022-38791
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release...
Medium
5.5
CVE-2022-32091
MariaDB v10.7 was discovered to contain an use-after-poison in in...
High
7.5
CVE-2022-32089
MariaDB v10.5 to v10.7 was discovered to contain a segmentation...
High
7.5
CVE-2022-32088
MariaDB v10.2 to v10.7 was discovered to contain a segmentation...
High
7.5
Affected Vendor
mariadb
View all reports →Affected Software
mariadb
Vulnerable Versions:
0, 10.3.0, 10.4.0, 10.5.0, 10.6.0
Timeline
Official Publish:
May 25th, 2022
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.