MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occurs (stream_ctxt->dest_file == NULL) while executing the method xbstream_open, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Centos_linux | — | Upgrade mariadb-develUpgrade JudyUpgrade mariadb-test-debuginfoUpgrade galeraUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade galera-debugsourceUpgrade mariadb-serverUpgrade mariadbUpgrade galera-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-server-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-debugsourceUpgrade mariadb-backup-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-pam | Jun 14, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadbUpgrade mariadb-common | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Oct 13, 2025 | May 25, 2022 |
| Redhat_linux | — | Upgrade mariadb-server-utilsUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade mariadb-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade mariadb-pam-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-testUpgrade galeraUpgrade mariadb-serverUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-errmsgNo solution existsUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade galera-debugsourceUpgrade mariadb-embedded-debuginfo | Jun 14, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade mariadb-server-galeraUpgrade Judy-debuginfoUpgrade mariadb-commonUpgrade mariadb-pam-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb-debuginfoUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-backup-debuginfoUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-server-debuginfoUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfo | Mar 5, 2024 | May 25, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub