MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-pamUpgrade JudyUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade galera | Aug 8, 2022 | May 25, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-cracklib-password-checkUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-rocksdb-engineUpgrade mariadb-serverUpgrade mariadb-sphinx-engineUpgrade mariadb-configUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-pamUpgrade mariadb-connect-engineUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-libsUpgrade mariadb-backupUpgrade mariadb-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-s3-engineUpgrade mariadb-test | Sep 28, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-backupUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-gssapi-serverUpgrade mariadb105-server-utilsUpgrade mariadb105-sphinx-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-testUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-debugsourceUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-errmsgUpgrade mariadb105-server-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105Upgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-develUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfo | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadb-serverUpgrade Judy-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadbUpgrade mysql-selinuxUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-backupUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade JudyUpgrade galera-debuginfoUpgrade mariadb-server-utils-debuginfo | Aug 3, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Oct 13, 2025 | May 25, 2022 |
| Oracle_linux | — | Upgrade mariadb-commonUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mysql-selinuxUpgrade JudyUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade mariadb-server-galera | Aug 4, 2022 | Sep 7, 2021 |
| Redhat_linux | — | Upgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade galera-debuginfoNo solution existsUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-develUpgrade mariadb-test-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-embeddedUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-serverUpgrade mysql-selinuxUpgrade mariadbUpgrade mariadb-pam-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debugsourceUpgrade mariadb-debuginfo | Aug 3, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadb-server-utilsUpgrade Judy-debugsourceUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-testUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-serverUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb-embeddedUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-pam | Mar 12, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub