MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-libsUpgrade mariadb-serverUpgrade mariadb-configUpgrade mariadb-embeddedUpgrade mariadb-cracklib-password-checkUpgrade mariadb-s3-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-sphinx-engineUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-connect-engineUpgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-benchUpgrade mariadb-backupUpgrade mariadb-pamUpgrade mariadb-rocksdb-engineUpgrade mariadb-embedded-devel | Jun 6, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-test-debuginfoUpgrade mariadb105-develUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-testUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-gssapi-serverUpgrade mariadb105-server-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-connect-engineUpgrade mariadb105Upgrade mariadb105-serverUpgrade mariadb105-commonUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-pam | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadbUpgrade mariadb-test-debuginfoUpgrade mariadb-backup-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade mariadb-server-galeraUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade Judy-debugsourceUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-gssapi-server-debuginfoUpgrade galeraUpgrade mariadb-commonUpgrade mariadb-test | Jun 14, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mariadb-serverUpgrade mariadb-benchUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-libs | Aug 18, 2022 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadbUpgrade mariadb-common | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 25, 2022 |
| Redhat_linux | — | Upgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debuginfoUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade galera-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-server-galeraUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-develUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-test-debuginfoNo solution existsUpgrade JudyUpgrade mariadb-server-utilsUpgrade Judy-debuginfo | Jun 14, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadb-embedded-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-develUpgrade galera-debugsourceUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-gssapi-serverUpgrade galera-debuginfoUpgrade mariadb-commonUpgrade mariadb-testUpgrade JudyUpgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfo | Mar 5, 2024 | May 25, 2022 |
| Ubuntu | — | Upgrade mariadb-10.3 | Nov 19, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub