MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade JudyUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-devel | Aug 8, 2022 | May 25, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-debuginfoUpgrade mariadb-connect-engineUpgrade mariadb-backupUpgrade mariadb-pamUpgrade mariadb-s3-engineUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-libsUpgrade mariadb-commonUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mariadb-sphinx-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-rocksdb-engineUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-cracklib-password-checkUpgrade mariadb-config | Sep 28, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-backup-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-connect-engineUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-debuginfoUpgrade mariadb105Upgrade mariadb105-serverUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-server-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-develUpgrade mariadb105-testUpgrade mariadb105-server-utilsUpgrade mariadb105-gssapi-serverUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-pamUpgrade mariadb105-commonUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-connect-engine-debuginfo | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade mariadb-pamUpgrade mariadb-backup-debuginfoUpgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debuginfoUpgrade galera-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mysql-selinuxUpgrade galeraUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfoUpgrade mariadb-backupUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade galera-debuginfoUpgrade mariadb | Aug 3, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Oct 13, 2025 | May 25, 2022 |
| Oracle_linux | — | Upgrade mariadb-backupUpgrade galeraUpgrade mysql-selinuxUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-testUpgrade mariadb-server-utils | Aug 4, 2022 | Sep 7, 2021 |
| Redhat_linux | — | Upgrade mariadb-testUpgrade mysql-selinuxUpgrade galeraUpgrade mariadb-backupUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-serverUpgrade mariadbUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-develUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonNo solution existsUpgrade mariadb-backup-debuginfoUpgrade galera-debuginfo | Aug 3, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadb-debuginfoUpgrade Judy-debugsourceUpgrade galera-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-pam-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-backupUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadbUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-test-debuginfoUpgrade JudyUpgrade mariadb-develUpgrade mariadb-embedded-debuginfoUpgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-galeraUpgrade galera-debuginfoUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfo | Mar 12, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub