MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadbUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-gssapi-server | Aug 8, 2022 | May 25, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-sphinx-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-embeddedUpgrade mariadb-rocksdb-engineUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-configUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-s3-engineUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-connect-engineUpgrade mariadb-libsUpgrade mariadb-debuginfoUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-pam | Sep 28, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-backup-debuginfoUpgrade mariadb105-develUpgrade mariadb105-serverUpgrade mariadb105Upgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-errmsgUpgrade mariadb105-test-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-debugsourceUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-server-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-sphinx-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-backupUpgrade mariadb105-testUpgrade mariadb105-cracklib-password-check | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade galera-debuginfoUpgrade mysql-selinuxUpgrade mariadb-test-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade Judy-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-backup-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-serverUpgrade mariadb-debuginfoUpgrade galera-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-test | Aug 3, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Oct 13, 2025 | May 25, 2022 |
| Oracle_linux | — | Upgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mysql-selinuxUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade JudyUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-testUpgrade mariadb-server-galera | Aug 4, 2022 | Sep 7, 2021 |
| Redhat_linux | — | Upgrade mariadb-server-utils-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-backupUpgrade mysql-selinuxUpgrade galeraUpgrade Judy-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-testUpgrade galera-debugsourceUpgrade mariadb-server-utilsUpgrade JudyUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-server-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-test-debuginfoUpgrade mariadb-develNo solution existsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade mariadb-pamUpgrade galera-debuginfoUpgrade mariadb-embedded-devel | Aug 3, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadb-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-debugsourceUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-debuginfoUpgrade galera-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadbUpgrade Judy-debugsource | Mar 12, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub