Total vulnerabilities in the database
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
| Software | From | Fixed in |
|---|---|---|
| mariadb / mariadb | 10.3.0 | 10.3.36 |
| mariadb / mariadb | 10.4.0 | 10.4.26 |
| mariadb / mariadb | 10.5.0 | 10.5.17 |
| mariadb / mariadb | 10.6.0 | 10.6.9 |
| mariadb / mariadb | 10.7.0 | 10.7.5 |
| mariadb / mariadb | 10.8.0 | 10.8.4 |
| mariadb / mariadb | 10.9.1 | 10.9.1.x |
| fedoraproject / fedora | 35 | 35.x |
| fedoraproject / fedora | 36 | 36.x |
| fedoraproject / fedora | 37 | 37.x |