In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-server-utilsUpgrade JudyUpgrade mariadb-gssapi-serverUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-test | Sep 25, 2023 | Aug 27, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-connect-engineUpgrade mariadb-debuginfoUpgrade mariadb-s3-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-sphinx-engineUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-libsUpgrade mariadb-cracklib-password-checkUpgrade mariadb-rocksdb-engineUpgrade mariadb-config | Sep 28, 2023 | Aug 27, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-testUpgrade mariadb105-develUpgrade mariadb105-debugsourceUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-serverUpgrade mariadb105-commonUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-backupUpgrade mariadb105-server-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-test-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-sphinx-engineUpgrade mariadb105Upgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfo | Feb 17, 2025 | Jun 1, 2022 |
| Centos_linux | — | Upgrade mariadb-pam-debuginfoUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utilsUpgrade galera-debugsourceUpgrade mariadbUpgrade galera-debuginfoUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-serverUpgrade mariadb-debuginfoUpgrade JudyUpgrade mariadb-errmsgUpgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade mariadb-commonUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-backup | Sep 20, 2023 | Aug 27, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 29, 2022 | Aug 27, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Aug 27, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Feb 9, 2023 | Aug 27, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Aug 27, 2022 |
| Oracle_linux | — | Upgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-testUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb | Sep 21, 2023 | Jun 1, 2022 |
| Redhat_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-test-debuginfoUpgrade galeraUpgrade mariadb-debugsourceUpgrade mariadbUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade galera-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade Judy-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade galera-debuginfoUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-serverUpgrade mariadb-pamNo solution exists | Sep 20, 2023 | Aug 27, 2022 |
| Rocky_linux | — | Upgrade mariadb-server-debuginfoUpgrade mariadb-testUpgrade Judy-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade galeraUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade mariadb-serverUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-test-debuginfoUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraUpgrade galera-debuginfoUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-embedded-debuginfoUpgrade mariadb-develUpgrade mariadb-server-utils | Aug 15, 2024 | Aug 27, 2022 |
| Suse | — | Upgrade libmariadb_pluginsUpgrade mariadb-toolsUpgrade libmariadb-develUpgrade mariadb-errormessagesUpgrade libmariadb3Upgrade liblz4-1Upgrade mariadbUpgrade libmariadbd104-develUpgrade mariadb104-testUpgrade libmariadbd-develUpgrade mariadb-rpm-macrosUpgrade mariadb-benchUpgrade mariadb104-rpm-macrosUpgrade mariadb104-clientUpgrade mariadb-testUpgrade python3-mysqlclientUpgrade mariadb104-galeraUpgrade mariadb104Upgrade mariadb104-benchUpgrade mariadb104-errormessagesUpgrade mariadb104-toolsUpgrade mariadb-galeraUpgrade libmariadbd19Upgrade mariadb-client | Oct 26, 2022 | Aug 27, 2022 |
| Ubuntu | — | Upgrade mariadb-10.6Upgrade mariadb-10.3 | Nov 19, 2024 | Aug 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub