MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-benchUpgrade mariadbUpgrade mariadb-embedded-develUpgrade mariadb-connect-engineUpgrade mariadb-sphinx-engineUpgrade mariadb-backupUpgrade mariadb-rocksdb-engineUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-libsUpgrade mariadb-cracklib-password-checkUpgrade mariadb-gssapi-serverUpgrade mariadb-configUpgrade mariadb-s3-engineUpgrade mariadb-debuginfo | Jun 6, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-debugsourceUpgrade mariadb105-serverUpgrade mariadb105-connect-engineUpgrade mariadb105-sphinx-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-pamUpgrade mariadb105Upgrade mariadb105-commonUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-testUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-develUpgrade mariadb105-backupUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-server-debuginfo | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade galera-debuginfoUpgrade mariadb-commonUpgrade galeraUpgrade JudyUpgrade mariadb-testUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-serverUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade galera-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfoUpgrade mariadbUpgrade mariadb-backup-debuginfoUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-embeddedUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-pam-debuginfo | Jun 14, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mariadb-serverUpgrade mariadb-benchUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-libs | Aug 18, 2022 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 25, 2022 |
| Redhat_linux | — | Upgrade Judy-debuginfoUpgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-galeraUpgrade JudyUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-server-utilsUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineNo solution existsUpgrade mariadb-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-embedded-debuginfoUpgrade galeraUpgrade mariadb-backupUpgrade galera-debuginfoUpgrade mariadb-debugsourceUpgrade galera-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debuginfoUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-testUpgrade mariadb-embedded | Jun 14, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade Judy-debuginfoUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-serverUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade galeraUpgrade mariadb-develUpgrade mariadb-embedded-debuginfoUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-debugsourceUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-gssapi-server-debuginfo | Mar 5, 2024 | May 25, 2022 |
| Ubuntu | — | Upgrade mariadb-10.3 | Nov 19, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub