MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occurs (stream_ctxt->dest_file == NULL) while executing the method xbstream_open, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Centos_linux | — | Upgrade Judy-debugsourceUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-server-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade mariadbUpgrade Judy-debuginfoUpgrade galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade galera-debugsourceUpgrade mariadb-server-galeraUpgrade JudyUpgrade mariadb-common | Jun 14, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-commonUpgrade mariadb-devel | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Oct 13, 2025 | May 25, 2022 |
| Redhat_linux | — | Upgrade mariadb-pamUpgrade mariadb-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-test-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-server-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-develUpgrade galera-debugsourceUpgrade mariadb-testUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade JudyUpgrade galera-debuginfoNo solution existsUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfoUpgrade Judy-debugsource | Jun 14, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade galeraUpgrade Judy-debuginfoUpgrade mariadb-commonUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-debuginfoUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-testUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-backup-debuginfoUpgrade JudyUpgrade mariadb-gssapi-server | Mar 5, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub