MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadbUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-server | Aug 8, 2022 | May 25, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-embeddedUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-sphinx-engineUpgrade mariadb-connect-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-backupUpgrade mariadb-rocksdb-engineUpgrade mariadb-s3-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-libsUpgrade mariadb-embedded-develUpgrade mariadb-configUpgrade mariadb-server-galera | Sep 28, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105Upgrade mariadb105-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-pamUpgrade mariadb105-testUpgrade mariadb105-errmsgUpgrade mariadb105-test-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-develUpgrade mariadb105-server-debuginfoUpgrade mariadb105-server | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade mysql-selinuxUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-server-debuginfoUpgrade mariadb-serverUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-backup-debuginfoUpgrade mariadb-develUpgrade Judy-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-errmsgUpgrade mariadbUpgrade galera-debuginfoUpgrade mariadb-testUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-serverUpgrade Judy-debugsourceUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-debuginfoUpgrade mariadb-commonUpgrade mariadb-embedded-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-oqgraph-engine-debuginfo | Aug 3, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Oct 13, 2025 | May 25, 2022 |
| Oracle_linux | — | Upgrade mariadbUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mysql-selinuxUpgrade mariadb-embedded-devel | Aug 4, 2022 | Sep 7, 2021 |
| Redhat_linux | — | No solution existsUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-backup-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-server-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galera-debuginfoUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-debugsourceUpgrade mariadb-pamUpgrade mysql-selinuxUpgrade galera-debugsourceUpgrade mariadb-errmsgUpgrade Judy-debugsourceUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade JudyUpgrade mariadb-gssapi-serverUpgrade galera | Aug 3, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadb-debuginfoUpgrade mariadbUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-backup-debuginfoUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-commonUpgrade galera-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfo | Mar 12, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub