MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadb-debuginfoUpgrade mariadb-libsUpgrade mariadb-configUpgrade mariadb-server-utilsUpgrade mariadb-cracklib-password-checkUpgrade mariadb-s3-engineUpgrade mariadb-rocksdb-engineUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-benchUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade mariadb-connect-engineUpgrade mariadb-backupUpgrade mariadb-sphinx-engineUpgrade mariadb | Jun 6, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-sphinx-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-debugsourceUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105Upgrade mariadb105-backup-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-serverUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-testUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-develUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-errmsgUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-gssapi-server | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade galeraUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-testUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-backupUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfo | Jun 14, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mariadb-develUpgrade mariadb-libsUpgrade mariadbUpgrade mariadb-benchUpgrade mariadb-server | Aug 18, 2022 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadbUpgrade mariadb-devel | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 25, 2022 |
| Redhat_linux | — | Upgrade mariadb-pam-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineNo solution existsUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade JudyUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadb-backup-debuginfoUpgrade galera-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadbUpgrade Judy-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-pam | Jun 14, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade Judy-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade JudyUpgrade mariadb-debugsourceUpgrade mariadb-backup-debuginfoUpgrade galera-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade mariadbUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-errmsgUpgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-server-debuginfo | Mar 5, 2024 | May 25, 2022 |
| Ubuntu | — | Upgrade mariadb-10.3 | Nov 19, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub