In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-common | Sep 25, 2023 | Aug 27, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-s3-engineUpgrade mariadb-sphinx-engineUpgrade mariadb-connect-engineUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-configUpgrade mariadb-cracklib-password-checkUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-libsUpgrade mariadb-commonUpgrade mariadb-rocksdb-engineUpgrade mariadb-pam | Sep 28, 2023 | Aug 27, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-pamUpgrade mariadb105-backupUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-server-utilsUpgrade mariadb105Upgrade mariadb105-errmsgUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-develUpgrade mariadb105-testUpgrade mariadb105-gssapi-serverUpgrade mariadb105-connect-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-common | Feb 17, 2025 | Jun 1, 2022 |
| Centos_linux | — | Upgrade mariadb-debugsourceUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-debuginfoUpgrade mariadb-pamUpgrade Judy-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-backupUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadb-develUpgrade galeraUpgrade mariadb-server-utilsUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade Judy-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-server-utils-debuginfo | Sep 20, 2023 | Aug 27, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 29, 2022 | Aug 27, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Aug 27, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Feb 9, 2023 | Aug 27, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Aug 27, 2022 |
| Oracle_linux | — | Upgrade mariadbUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-server-galera | Sep 21, 2023 | Jun 1, 2022 |
| Redhat_linux | — | Upgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade galera-debugsourceUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-pam-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadbUpgrade mariadb-test-debuginfoUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-embedded-debuginfoUpgrade mariadb-testUpgrade mariadb-commonNo solution existsUpgrade Judy-debugsourceUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadb-backup | Sep 20, 2023 | Aug 27, 2022 |
| Rocky_linux | — | Upgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debugsourceUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade Judy-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-serverUpgrade Judy-debugsourceUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade galera-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfoUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-test-debuginfoUpgrade mariadb-backupUpgrade mariadb-server-utilsUpgrade Judy | Aug 15, 2024 | Aug 27, 2022 |
| Suse | — | Upgrade libmariadb-develUpgrade liblz4-1Upgrade mariadb-toolsUpgrade mariadb-errormessagesUpgrade libmariadb_pluginsUpgrade libmariadb3Upgrade mariadb104-benchUpgrade libmariadbd19Upgrade mariadb104-galeraUpgrade mariadb104-clientUpgrade mariadb-benchUpgrade mariadb104Upgrade mariadb104-errormessagesUpgrade mariadb-rpm-macrosUpgrade mariadb-clientUpgrade mariadbUpgrade libmariadbd104-develUpgrade libmariadbd-develUpgrade mariadb104-toolsUpgrade mariadb-galeraUpgrade mariadb-testUpgrade mariadb104-rpm-macrosUpgrade mariadb104-testUpgrade python3-mysqlclient | Oct 26, 2022 | Aug 27, 2022 |
| Ubuntu | — | Upgrade mariadb-10.3Upgrade mariadb-10.6 | Nov 19, 2024 | Aug 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub