The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade mariadb-commonUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-test | Aug 8, 2022 | May 25, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-cracklib-password-checkUpgrade mariadb-sphinx-engineUpgrade mariadb-configUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-rocksdb-engineUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadb-s3-engineUpgrade mariadb-commonUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-libsUpgrade mariadb-connect-engineUpgrade mariadbUpgrade mariadb-pamUpgrade mariadb-errmsg | Sep 28, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-testUpgrade mariadb105-gssapi-serverUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-sphinx-engineUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-server-utilsUpgrade mariadb105-pamUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-connect-engineUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-serverUpgrade mariadb105-develUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105 | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade Judy-debuginfoUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-server-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade JudyUpgrade galeraUpgrade mysql-selinuxUpgrade mariadbUpgrade mariadb-backup | Aug 3, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Oct 13, 2025 | May 25, 2022 |
| Oracle_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mysql-selinuxUpgrade mariadb-embedded-develUpgrade galeraUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-server | Aug 4, 2022 | Sep 7, 2021 |
| Redhat_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoNo solution existsUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-embedded-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadb-server-debuginfoUpgrade mysql-selinuxUpgrade mariadb-embeddedUpgrade Judy-debugsourceUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-backupUpgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade Judy-debuginfoUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade galera-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utils-debuginfo | Aug 3, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadb-backupUpgrade mariadb-pam-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-gssapi-server-debuginfoUpgrade galeraUpgrade mariadb-testUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade Judy-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-galeraUpgrade galera-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-develUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-test-debuginfo | Mar 12, 2024 | May 25, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub