In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-server-utilsUpgrade galeraUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-gssapi-server | Sep 25, 2023 | Aug 27, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-libsUpgrade mariadb-backupUpgrade mariadb-cracklib-password-checkUpgrade mariadb-configUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-rocksdb-engineUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-s3-engineUpgrade mariadbUpgrade mariadb-sphinx-engineUpgrade mariadb-debuginfoUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-connect-engine | Sep 28, 2023 | Aug 27, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-cracklib-password-checkUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-sphinx-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-test-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105Upgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-errmsgUpgrade mariadb105-server-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-develUpgrade mariadb105-debugsourceUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-connect-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-testUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-pam-debuginfo | Feb 17, 2025 | Jun 1, 2022 |
| Centos_linux | — | Upgrade mariadb-backupUpgrade JudyUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debuginfoUpgrade mariadb-commonUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-backup-debuginfoUpgrade galera-debugsourceUpgrade mariadb-develUpgrade galeraUpgrade mariadb-server-galera | Sep 20, 2023 | Aug 27, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 29, 2022 | Aug 27, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Aug 27, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb | Feb 9, 2023 | Aug 27, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Aug 27, 2022 |
| Oracle_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade JudyUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadbUpgrade mariadb-pam | Sep 21, 2023 | Jun 1, 2022 |
| Redhat_linux | — | Upgrade mariadb-pamUpgrade mariadb-errmsgNo solution existsUpgrade JudyUpgrade mariadb-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadb-testUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade Judy-debugsourceUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-debuginfoUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadbUpgrade mariadb-debugsourceUpgrade mariadb-test-debuginfoUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade galera-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-galera | Sep 20, 2023 | Aug 27, 2022 |
| Rocky_linux | — | Upgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-server-utils-debuginfoUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-testUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debugsourceUpgrade mariadb-serverUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debugsourceUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfo | Aug 15, 2024 | Aug 27, 2022 |
| Suse | — | Upgrade mariadb104-testUpgrade mariadb104Upgrade libmariadbd104-develUpgrade mariadb104-galeraUpgrade mariadb104-clientUpgrade mariadb104-benchUpgrade mariadb104-rpm-macrosUpgrade mariadb-testUpgrade python3-mysqlclientUpgrade mariadb-benchUpgrade libmariadbd19Upgrade mariadb104-toolsUpgrade mariadb-galeraUpgrade libmariadbd-develUpgrade mariadb-rpm-macrosUpgrade mariadb104-errormessagesUpgrade mariadbUpgrade mariadb-clientUpgrade libmariadb-develUpgrade liblz4-1Upgrade mariadb-errormessagesUpgrade libmariadb3Upgrade libmariadb_pluginsUpgrade mariadb-tools | Oct 26, 2022 | Aug 27, 2022 |
| Ubuntu | — | Upgrade mariadb-10.6Upgrade mariadb-10.3 | Nov 19, 2024 | Aug 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub