MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-configUpgrade mariadb-cracklib-password-checkUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-s3-engineUpgrade mariadb-server-utilsUpgrade mariadb-libsUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-connect-engineUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-sphinx-engineUpgrade mariadbUpgrade mariadb-pamUpgrade mariadb-oqgraph-engineUpgrade mariadb-rocksdb-engineUpgrade mariadb-embedded-develUpgrade mariadb-benchUpgrade mariadb-server-galera | Jun 6, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-pam-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-develUpgrade mariadb105-gssapi-serverUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-testUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-debugsourceUpgrade mariadb105Upgrade mariadb105-connect-engineUpgrade mariadb105-serverUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-sphinx-engineUpgrade mariadb105-commonUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-oqgraph-engine-debuginfo | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade mariadb-backupUpgrade mariadb-commonUpgrade galera-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-errmsgUpgrade JudyUpgrade galera-debugsourceUpgrade mariadb-testUpgrade Judy-debugsourceUpgrade mariadb-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-pamUpgrade mariadb-pam-debuginfoUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfo | Jun 14, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadbUpgrade mariadb-benchUpgrade mariadb-devel | Aug 18, 2022 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadbUpgrade mariadb-devel | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 25, 2022 |
| Redhat_linux | — | Upgrade JudyNo solution existsUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-server-utilsUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-develUpgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-embedded-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadbUpgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pamUpgrade galera-debuginfoUpgrade mariadb-backupUpgrade mariadb-gssapi-server | Jun 14, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadbUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-debuginfoUpgrade mariadb-embedded-develUpgrade galera-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade mariadb-testUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-commonUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engine-debuginfo | Mar 5, 2024 | May 25, 2022 |
| Ubuntu | — | Upgrade mariadb-10.3 | Nov 19, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub