MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-commonUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-testUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-server-galera | Aug 8, 2022 | May 25, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-commonUpgrade mariadb-s3-engineUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadbUpgrade mariadb-libsUpgrade mariadb-connect-engineUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadb-rocksdb-engineUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-sphinx-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-config | Sep 28, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-pamUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-server-utilsUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-testUpgrade mariadb105-gssapi-serverUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-debugsourceUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-test-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-server-debuginfoUpgrade mariadb105Upgrade mariadb105-develUpgrade mariadb105-cracklib-password-check-debuginfo | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade mariadb-backup-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-pamUpgrade mariadb-debuginfoUpgrade Judy-debugsourceUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-pam-debuginfoUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade JudyUpgrade galeraUpgrade mariadb-server-utils-debuginfoUpgrade galera-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-commonUpgrade mysql-selinux | Aug 3, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-develUpgrade mariadb-common | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Oct 13, 2025 | May 25, 2022 |
| Oracle_linux | — | Upgrade mariadb-develUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mysql-selinuxUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-errmsg | Aug 4, 2022 | Sep 7, 2021 |
| Redhat_linux | — | Upgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-backup-debuginfoUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-test-debuginfoNo solution existsUpgrade galera-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mysql-selinuxUpgrade mariadb-backupUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debugsource | Aug 3, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-develUpgrade mariadb-pamUpgrade JudyUpgrade galera-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-backupUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-serverUpgrade Judy-debugsourceUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade galera | Mar 12, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub