MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadbUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-commonUpgrade mariadb-pamUpgrade Judy | Aug 8, 2022 | May 25, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-cracklib-password-checkUpgrade mariadb-rocksdb-engineUpgrade mariadb-serverUpgrade mariadb-configUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-sphinx-engineUpgrade mariadb-commonUpgrade mariadb-connect-engineUpgrade mariadb-libsUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-s3-engineUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade mariadb-debuginfo | Sep 28, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-server-utilsUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-pamUpgrade mariadb105-gssapi-serverUpgrade mariadb105-backupUpgrade mariadb105-testUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105Upgrade mariadb105-test-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-develUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-connect-engineUpgrade mariadb105-errmsgUpgrade mariadb105-debugsourceUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-server-debuginfo | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade Judy-debugsourceUpgrade mariadb-pamUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-server-utils-debuginfoUpgrade galera-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-test-debuginfoUpgrade JudyUpgrade mariadb-embedded-debuginfoUpgrade mariadbUpgrade mysql-selinuxUpgrade mariadb-errmsgUpgrade mariadb-server-galera | Aug 3, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-develUpgrade mariadb-common | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Oct 13, 2025 | May 25, 2022 |
| Oracle_linux | — | Upgrade mariadb-backupUpgrade mysql-selinuxUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade JudyUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb | Aug 4, 2022 | Sep 7, 2021 |
| Redhat_linux | — | Upgrade mariadb-testUpgrade mariadb-backupUpgrade Judy-debuginfoUpgrade mariadb-debuginfoUpgrade mariadbUpgrade Judy-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadb-gssapi-server-debuginfoUpgrade mysql-selinuxUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade mariadb-serverUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-test-debuginfoUpgrade galera-debuginfoUpgrade mariadb-server-debuginfoNo solution existsUpgrade mariadb-backup-debuginfoUpgrade JudyUpgrade mariadb-develUpgrade mariadb-embedded-debuginfoUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-errmsg | Aug 3, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadb-test-debuginfoUpgrade galera-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-embedded-debuginfoUpgrade JudyUpgrade mariadb-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-pamUpgrade Judy-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-backupUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-debuginfoUpgrade galera-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade galeraUpgrade mariadb-embeddedUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-serverUpgrade mariadb-debugsource | Mar 12, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub