Описание
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | mariadb | Out of support scope | ||
| Red Hat OpenStack Platform 13 (Queens) | mariadb | Out of support scope | ||
| Red Hat Software Collections | rh-mariadb103-mariadb | Will not fix | ||
| Red Hat Enterprise Linux 8 | mariadb | Fixed | RHSA-2023:5259 | 19.09.2023 |
| Red Hat Enterprise Linux 8 | mariadb | Fixed | RHSA-2023:5683 | 12.10.2023 |
| Red Hat Enterprise Linux 9 | mariadb | Fixed | RHSA-2023:5684 | 12.10.2023 |
| Red Hat Software Collections for Red Hat Enterprise Linux 7 | rh-mariadb105-mariadb | Fixed | RHSA-2023:7633 | 04.12.2023 |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-667
https://bugzilla.redhat.com/show_bug.cgi?id=2130105mariadb: compress_write() fails to release mutex on failure
6.5 Medium
CVSS3
Связанные уязвимости
CVSS3: 5.5
ubuntu
почти 3 года назад
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVSS3: 5.5
nvd
почти 3 года назад
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVSS3: 5.5
debian
почти 3 года назад
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compr ...
6.5 Medium
CVSS3