In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-server-utilsUpgrade mariadbUpgrade galeraUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-pamUpgrade Judy | Sep 25, 2023 | Aug 27, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadbUpgrade mariadb-s3-engineUpgrade mariadb-sphinx-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-connect-engineUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-rocksdb-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-libsUpgrade mariadb-backupUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-config | Sep 28, 2023 | Aug 27, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-test-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-errmsgUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105Upgrade mariadb105-cracklib-password-checkUpgrade mariadb105-sphinx-engineUpgrade mariadb105-backupUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-serverUpgrade mariadb105-connect-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-debuginfoUpgrade mariadb105-develUpgrade mariadb105-testUpgrade mariadb105-gssapi-server-debuginfo | Feb 17, 2025 | Jun 1, 2022 |
| Centos_linux | — | Upgrade mariadb-pam-debuginfoUpgrade galeraUpgrade mariadb-backup-debuginfoUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-test-debuginfoUpgrade galera-debugsourceUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-debugsourceUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debuginfo | Sep 20, 2023 | Aug 27, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 29, 2022 | Aug 27, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Aug 27, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Feb 9, 2023 | Aug 27, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Aug 27, 2022 |
| Oracle_linux | — | Upgrade JudyUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade mariadb-server | Sep 21, 2023 | Jun 1, 2022 |
| Redhat_linux | — | Upgrade JudyUpgrade mariadb-commonNo solution existsUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-pamUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-backupUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debuginfoUpgrade galeraUpgrade Judy-debuginfoUpgrade galera-debugsourceUpgrade mariadb-develUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadbUpgrade mariadb-pam-debuginfo | Sep 20, 2023 | Aug 27, 2022 |
| Rocky_linux | — | Upgrade mariadbUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-debugsourceUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-debuginfoUpgrade mariadb-serverUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-test | Aug 15, 2024 | Aug 27, 2022 |
| Suse | — | Upgrade mariadb104Upgrade libmariadbd19Upgrade mariadb104-galeraUpgrade mariadb-rpm-macrosUpgrade mariadb-benchUpgrade mariadb104-toolsUpgrade mariadb104-benchUpgrade mariadb104-errormessagesUpgrade mariadb-testUpgrade python3-mysqlclientUpgrade mariadb104-rpm-macrosUpgrade mariadb104-testUpgrade mariadb-clientUpgrade libmariadbd-develUpgrade libmariadbd104-develUpgrade mariadb-galeraUpgrade mariadb104-clientUpgrade mariadbUpgrade mariadb-errormessagesUpgrade mariadb-toolsUpgrade libmariadb3Upgrade libmariadb_pluginsUpgrade libmariadb-develUpgrade liblz4-1 | Oct 26, 2022 | Aug 27, 2022 |
| Ubuntu | — | Upgrade mariadb-10.3Upgrade mariadb-10.6 | Nov 19, 2024 | Aug 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub