The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occurs (stream_ctxt->dest_file == NULL) while executing the method xbstream_open, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Centos_linux | — | Upgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade mariadbUpgrade JudyUpgrade galera-debugsourceUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade Judy-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade galeraUpgrade mariadb-server-utilsUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade galera-debuginfoUpgrade mariadb-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-server-debuginfo | Jun 14, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadbUpgrade mariadb-common | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Oct 13, 2025 | May 25, 2022 |
| Redhat_linux | — | Upgrade mariadb-develUpgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-test-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-embeddedUpgrade JudyNo solution existsUpgrade galeraUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade galera-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-embedded-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-backup | Jun 14, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade JudyUpgrade galera-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-testUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-commonUpgrade mariadb-debugsourceUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-test-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-errmsgUpgrade Judy-debuginfoUpgrade mariadb-backupUpgrade mariadb-debuginfoUpgrade mariadbUpgrade galera-debugsourceUpgrade mariadb-embeddedUpgrade galeraUpgrade Judy-debugsourceUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfo | Mar 5, 2024 | May 25, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub