Critical Vulnerability in MariaDB Packages Leading to Denial of Service
Summary
DEBIAN-CVE-2025-21490: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Affects mariadb versions < 1:10.11.11-0+deb12u1. Fixed in 1:10.11.11-0+deb12u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MariaDB is an open-source relational database management system that is widely used for web applications and data storage. It is a fork of MySQL and offers enhanced features, performance improvements, and a strong community support. The vulnerability identified as DEBIAN-CVE-2025-21490 affects various versions of MariaDB, specifically versions 10.5, 11, and 12, which may allow high-privileged attackers to exploit the system and cause a denial of service.
Vulnerability Detail
The vulnerability originates from the MySQL Server product of Oracle MySQL, specifically within the InnoDB component. Supported versions affected include 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. This vulnerability is easily exploitable by high-privileged attackers with network access through multiple protocols, potentially leading to unauthorized actions that can cause the MySQL Server to hang or crash repeatedly, resulting in a complete denial of service (DoS). The CVSS 3.1 Base Score for this vulnerability is 4.9, indicating significant availability impacts.
How To Fix
Minimum fixed version
1:10.11.11-0+deb12u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade mariadbTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider restricting network access to the MySQL Server, limiting it to trusted IP addresses only. This can help mitigate the risk of exploitation until the patch is applied.
Conclusion
The vulnerability DEBIAN-CVE-2025-21490 poses a significant risk to various MariaDB packages, allowing potential denial of service attacks. It is crucial to update to the patched versions as soon as possible and consider implementing network access restrictions as a temporary workaround. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for mariadb →
FAQ
The vulnerability allows high-privileged attackers to exploit the MySQL Server, potentially causing it to hang or crash, leading to a denial of service.
Affected versions include MariaDB 10.5, 11, and 12, with specific patched versions available for each.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If immediate updates are not possible, restrict network access to the MySQL Server to trusted IP addresses as a temporary measure.
Vulert is a service that monitors and alerts for open-source vulnerabilities in software using a manifest file like package-lock.json, without requiring access to the code or installation.
References
Related vulnerabilities
Recent vulnerabilities recorded for mariadb.
