MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | May 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-pamUpgrade mariadb-rocksdb-engineUpgrade mariadb-connect-engineUpgrade mariadbUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-benchUpgrade mariadb-sphinx-engineUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-configUpgrade mariadb-testUpgrade mariadb-libsUpgrade mariadb-s3-engineUpgrade mariadb-serverUpgrade mariadb-cracklib-password-checkUpgrade mariadb-debuginfo | Jun 6, 2023 | May 25, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-backupUpgrade mariadb105-gssapi-serverUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-testUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-develUpgrade mariadb105-server-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105Upgrade mariadb105-server-utilsUpgrade mariadb105-debugsourceUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-serverUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-connect-engineUpgrade mariadb105-pamUpgrade mariadb105-oqgraph-engine | Feb 17, 2025 | Sep 7, 2021 |
| Centos_linux | — | Upgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade JudyUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-embedded-debuginfoUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade mariadb-gssapi-server-debuginfoUpgrade galeraUpgrade galera-debugsourceUpgrade mariadb-embedded-develUpgrade Judy-debugsourceUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-server-debuginfo | Jun 14, 2022 | May 25, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | May 25, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | May 25, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mariadb-develUpgrade mariadb-benchUpgrade mariadb-libsUpgrade mariadb-serverUpgrade mariadb | Aug 18, 2022 | May 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Aug 18, 2022 | May 25, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | May 25, 2022 |
| Redhat_linux | — | Upgrade mariadb-pam-debuginfoUpgrade mariadb-develUpgrade galera-debugsourceUpgrade galeraUpgrade Judy-debuginfoUpgrade mariadb-commonUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-server-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoNo solution existsUpgrade mariadb-oqgraph-engineUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade galera-debuginfoUpgrade mariadb-backupUpgrade mariadb-debugsourceUpgrade mariadb-testUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-debuginfo | Jun 14, 2022 | May 25, 2022 |
| Rocky_linux | — | Upgrade JudyUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade mariadb-debugsourceUpgrade mariadb-commonUpgrade galera-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-test-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadbUpgrade mariadb-backupUpgrade mariadb-develUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfo | Mar 5, 2024 | May 25, 2022 |
| Ubuntu | — | Upgrade mariadb-10.3 | Nov 19, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub