MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-galeraalma-upgrade-judyalma-upgrade-mariadbalma-upgrade-mariadb-backupalma-upgrade-mariadb-commonalma-upgrade-mariadb-develalma-upgrade-mariadb-embeddedalma-upgrade-mariadb-embedded-develalma-upgrade-mariadb-errmsgalma-upgrade-mariadb-gssapi-serveralma-upgrade-mariadb-oqgraph-enginealma-upgrade-mariadb-pamalma-upgrade-mariadb-serveralma-upgrade-mariadb-server-galeraalma-upgrade-mariadb-server-utilsalma-upgrade-mariadb-test | Aug 8, 2022 | May 25, 2022 | |
| Alpine Linux | alpine-linux-upgrade-mariadb | Mar 26, 2024 | May 25, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-mariadbamazon-linux-ami-2-upgrade-mariadb-backupamazon-linux-ami-2-upgrade-mariadb-commonamazon-linux-ami-2-upgrade-mariadb-configamazon-linux-ami-2-upgrade-mariadb-connect-engineamazon-linux-ami-2-upgrade-mariadb-cracklib-password-checkamazon-linux-ami-2-upgrade-mariadb-debuginfoamazon-linux-ami-2-upgrade-mariadb-develamazon-linux-ami-2-upgrade-mariadb-embeddedamazon-linux-ami-2-upgrade-mariadb-embedded-develamazon-linux-ami-2-upgrade-mariadb-errmsgamazon-linux-ami-2-upgrade-mariadb-gssapi-serveramazon-linux-ami-2-upgrade-mariadb-libsamazon-linux-ami-2-upgrade-mariadb-oqgraph-engineamazon-linux-ami-2-upgrade-mariadb-pamamazon-linux-ami-2-upgrade-mariadb-rocksdb-engineamazon-linux-ami-2-upgrade-mariadb-s3-engineamazon-linux-ami-2-upgrade-mariadb-serveramazon-linux-ami-2-upgrade-mariadb-server-galeraamazon-linux-ami-2-upgrade-mariadb-server-utilsamazon-linux-ami-2-upgrade-mariadb-sphinx-engineamazon-linux-ami-2-upgrade-mariadb-test | Sep 28, 2023 | May 25, 2022 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-mariadb105amazon-linux-2023-upgrade-mariadb105-backupamazon-linux-2023-upgrade-mariadb105-backup-debuginfoamazon-linux-2023-upgrade-mariadb105-commonamazon-linux-2023-upgrade-mariadb105-connect-engineamazon-linux-2023-upgrade-mariadb105-connect-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-cracklib-password-checkamazon-linux-2023-upgrade-mariadb105-cracklib-password-check-debuginfoamazon-linux-2023-upgrade-mariadb105-debuginfoamazon-linux-2023-upgrade-mariadb105-debugsourceamazon-linux-2023-upgrade-mariadb105-develamazon-linux-2023-upgrade-mariadb105-errmsgamazon-linux-2023-upgrade-mariadb105-gssapi-serveramazon-linux-2023-upgrade-mariadb105-gssapi-server-debuginfoamazon-linux-2023-upgrade-mariadb105-oqgraph-engineamazon-linux-2023-upgrade-mariadb105-oqgraph-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-pamamazon-linux-2023-upgrade-mariadb105-pam-debuginfoamazon-linux-2023-upgrade-mariadb105-rocksdb-engineamazon-linux-2023-upgrade-mariadb105-rocksdb-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-serveramazon-linux-2023-upgrade-mariadb105-server-debuginfoamazon-linux-2023-upgrade-mariadb105-server-utilsamazon-linux-2023-upgrade-mariadb105-server-utils-debuginfoamazon-linux-2023-upgrade-mariadb105-sphinx-engineamazon-linux-2023-upgrade-mariadb105-sphinx-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-testamazon-linux-2023-upgrade-mariadb105-test-debuginfo | Feb 17, 2025 | Sep 7, 2021 | |
| Centos_linux | — | centos-upgrade-galeracentos-upgrade-galera-debuginfocentos-upgrade-galera-debugsourcecentos-upgrade-judycentos-upgrade-judy-debuginfocentos-upgrade-judy-debugsourcecentos-upgrade-mariadbcentos-upgrade-mariadb-backupcentos-upgrade-mariadb-backup-debuginfocentos-upgrade-mariadb-commoncentos-upgrade-mariadb-debuginfocentos-upgrade-mariadb-debugsourcecentos-upgrade-mariadb-develcentos-upgrade-mariadb-embeddedcentos-upgrade-mariadb-embedded-debuginfocentos-upgrade-mariadb-embedded-develcentos-upgrade-mariadb-errmsgcentos-upgrade-mariadb-gssapi-servercentos-upgrade-mariadb-gssapi-server-debuginfocentos-upgrade-mariadb-oqgraph-enginecentos-upgrade-mariadb-oqgraph-engine-debuginfocentos-upgrade-mariadb-pamcentos-upgrade-mariadb-pam-debuginfocentos-upgrade-mariadb-servercentos-upgrade-mariadb-server-debuginfocentos-upgrade-mariadb-server-galeracentos-upgrade-mariadb-server-utilscentos-upgrade-mariadb-server-utils-debuginfocentos-upgrade-mariadb-testcentos-upgrade-mariadb-test-debuginfocentos-upgrade-mysql-selinux | Aug 3, 2022 | May 25, 2022 |
| Debian | debian-upgrade-mariadb-10-5 | Jul 30, 2024 | May 25, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-db-mariadb | May 10, 2024 | May 25, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-mariadbhuawei-euleros-2_0_sp8-upgrade-mariadb-commonhuawei-euleros-2_0_sp8-upgrade-mariadb-devel | Aug 18, 2022 | May 25, 2022 | |
| Mariadb Mariadb | mariadb-mariadb-upgrade-latest | Oct 13, 2025 | May 25, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-galeraoracle-linux-upgrade-judyoracle-linux-upgrade-mariadboracle-linux-upgrade-mariadb-backuporacle-linux-upgrade-mariadb-commonoracle-linux-upgrade-mariadb-develoracle-linux-upgrade-mariadb-embeddedoracle-linux-upgrade-mariadb-embedded-develoracle-linux-upgrade-mariadb-errmsgoracle-linux-upgrade-mariadb-gssapi-serveroracle-linux-upgrade-mariadb-oqgraph-engineoracle-linux-upgrade-mariadb-pamoracle-linux-upgrade-mariadb-serveroracle-linux-upgrade-mariadb-server-galeraoracle-linux-upgrade-mariadb-server-utilsoracle-linux-upgrade-mariadb-testoracle-linux-upgrade-mysql-selinux | Aug 4, 2022 | Sep 7, 2021 |
| Redhat_linux | redhat-upgrade-galeraredhat-upgrade-galera-debuginforedhat-upgrade-galera-debugsourceredhat-upgrade-judyredhat-upgrade-judy-debuginforedhat-upgrade-judy-debugsourceredhat-upgrade-mariadbredhat-upgrade-mariadb-backupredhat-upgrade-mariadb-backup-debuginforedhat-upgrade-mariadb-commonredhat-upgrade-mariadb-debuginforedhat-upgrade-mariadb-debugsourceredhat-upgrade-mariadb-develredhat-upgrade-mariadb-embeddedredhat-upgrade-mariadb-embedded-debuginforedhat-upgrade-mariadb-embedded-develredhat-upgrade-mariadb-errmsgredhat-upgrade-mariadb-gssapi-serverredhat-upgrade-mariadb-gssapi-server-debuginforedhat-upgrade-mariadb-oqgraph-engineredhat-upgrade-mariadb-oqgraph-engine-debuginforedhat-upgrade-mariadb-pamredhat-upgrade-mariadb-pam-debuginforedhat-upgrade-mariadb-serverredhat-upgrade-mariadb-server-debuginforedhat-upgrade-mariadb-server-galeraredhat-upgrade-mariadb-server-utilsredhat-upgrade-mariadb-server-utils-debuginforedhat-upgrade-mariadb-testredhat-upgrade-mariadb-test-debuginforedhat-upgrade-mysql-selinux | Aug 3, 2022 | May 25, 2022 | |
| Rocky_linux | rocky-upgrade-galerarocky-upgrade-galera-debuginforocky-upgrade-galera-debugsourcerocky-upgrade-judyrocky-upgrade-judy-debuginforocky-upgrade-judy-debugsourcerocky-upgrade-mariadbrocky-upgrade-mariadb-backuprocky-upgrade-mariadb-backup-debuginforocky-upgrade-mariadb-commonrocky-upgrade-mariadb-debuginforocky-upgrade-mariadb-debugsourcerocky-upgrade-mariadb-develrocky-upgrade-mariadb-embeddedrocky-upgrade-mariadb-embedded-debuginforocky-upgrade-mariadb-embedded-develrocky-upgrade-mariadb-errmsgrocky-upgrade-mariadb-gssapi-serverrocky-upgrade-mariadb-gssapi-server-debuginforocky-upgrade-mariadb-oqgraph-enginerocky-upgrade-mariadb-oqgraph-engine-debuginforocky-upgrade-mariadb-pamrocky-upgrade-mariadb-pam-debuginforocky-upgrade-mariadb-serverrocky-upgrade-mariadb-server-debuginforocky-upgrade-mariadb-server-galerarocky-upgrade-mariadb-server-utilsrocky-upgrade-mariadb-server-utils-debuginforocky-upgrade-mariadb-testrocky-upgrade-mariadb-test-debuginfo | Mar 12, 2024 | May 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub