Moderate Security Vulnerability in Galera and MariaDB Packages: Denial of Service and Crash Issues
Summary
ALSA-2025:19584: Moderate: galera and mariadb security update. Affects galera versions < 26.4.22-1.el9_6. Fixed in 26.4.22-1.el9_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Galera is a fast synchronous multimaster wsrep provider designed for transactional databases and similar applications. It enables high availability and scalability for database systems. MariaDB, a fork of MySQL, is a popular open-source relational database management system that provides enhanced features and performance. Both Galera and MariaDB are widely used in enterprise environments, making their security critical. Recent vulnerabilities have been identified that could lead to service disruptions and crashes.
Vulnerability Detail
The vulnerabilities identified in Galera and MariaDB include a high privilege denial of service vulnerability in MySQL Server (CVE-2025-21490) and multiple crash vulnerabilities in MariaDB (CVE-2023-52969, CVE-2023-52970). These vulnerabilities could allow an attacker to exploit the system, leading to service outages or crashes, impacting the availability of applications relying on these databases. The issues stem from improper handling of certain operations within the database engines.
How To Fix
Minimum fixed version
26.4.22-1.el9_6
This is the first release that contains the fix.
sudo dnf update galeraTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider limiting access to the database server and implementing strict firewall rules to minimize exposure to potential attacks until the packages can be updated. Additionally, monitoring logs for unusual activity can help identify potential exploitation attempts.
Conclusion
In summary, the identified vulnerabilities in Galera and MariaDB pose significant risks to the availability and stability of applications using these database systems. It is crucial to apply the necessary updates promptly and consider implementing workarounds to mitigate risks until updates can be applied.
See every vulnerability recorded for galera →
FAQ
The vulnerabilities could lead to denial of service attacks or crashes, affecting the availability of applications that depend on Galera and MariaDB.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By uploading your manifest file like package-lock.json, you can check for vulnerabilities without needing to access the code.
If immediate updates are not possible, implement strict access controls and monitor your systems for any suspicious activity as a temporary measure.
While specific exploits may not be publicly available, the nature of the vulnerabilities suggests that they could be exploited by attackers to disrupt services.
Detailed information about the vulnerabilities can be found on the CVE pages linked in the advisory, as well as on the official Galera and MariaDB documentation.
Related vulnerabilities
Recent vulnerabilities recorded for galera.
