MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-libsUpgrade mariadb-serverUpgrade mariadb-s3-engineUpgrade mariadb-testUpgrade mariadb-cracklib-password-checkUpgrade mariadb-embeddedUpgrade mariadb-configUpgrade mariadb-debuginfoUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-connect-engineUpgrade mariadb-sphinx-engineUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-benchUpgrade mariadb-server-galeraUpgrade mariadb-rocksdb-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-backup | Jun 6, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-gssapi-serverUpgrade mariadb105-test-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-develUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-testUpgrade mariadb105-server-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-serverUpgrade mariadb105-connect-engineUpgrade mariadb105Upgrade mariadb105-pamUpgrade mariadb105-sphinx-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-sphinx-engine-debuginfo | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade mariadb-commonUpgrade galeraUpgrade mariadb-errmsgUpgrade galera-debuginfoUpgrade mariadb-backupUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-testUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade JudyUpgrade mariadb-serverUpgrade galera-debugsourceUpgrade Judy-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadbUpgrade mariadb-test-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-devel | Jun 14, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mariadbUpgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadb-benchUpgrade mariadb-devel | Aug 18, 2022 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 25, 2022 |
| Redhat_linux | — | Upgrade mariadb-pamUpgrade mariadb-embeddedUpgrade Judy-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadbUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-server-debuginfoNo solution existsUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade JudyUpgrade mariadb-pam-debuginfoUpgrade mariadb-common | Jun 14, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade mariadb-test-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade Judy-debuginfoUpgrade galeraUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-debugsourceUpgrade mariadb-backup-debuginfoUpgrade JudyUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfo | Mar 5, 2024 | May 25, 2022 |
| Ubuntu | — | Upgrade mariadb-10.3 | Nov 19, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
