BSD PortsMariaDB -- DoS vulnerability in InnoDB
· CVE-2025-21490 · VuXML entry
MariaDB reports: Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
Affected versions
- mariadb105-server < 10.5.28
- mariadb106-server < 10.6.21
- mariadb1011-server < 10.11.11
- mariadb114-server < 11.4.5
By system
2 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | databases/mariadb105-server | 10.5.20 | vulnerable since 2025-02-07 | |
| NetBSD | databases/mariadb105-server | 10.5.29nb9 | not listed | |
| DragonFly | databases/mariadb106-server | 10.6.14 | vulnerable since 2025-02-07 | |
| NetBSD | databases/mariadb106-server | 10.6.27nb2 | not listed | |
| MidnightBSD | databases/mariadb106-server | 10.6.28 | out of range, by version | |
| FreeBSD | databases/mariadb1011-server | 10.11.19 | fixed | (564 days after) |
| NetBSD | databases/mariadb1011-server | 10.11.18nb2 | not listed | |
| FreeBSD | databases/mariadb114-server | 11.4.13 | fixed | (564 days after) |
| NetBSD | databases/mariadb114-server | 11.4.12nb2 | not listed | |
| MidnightBSD | databases/mariadb114-server | 11.4.13 | out of range, by version |