CVE-2023-52968

EUVD-2023-59686
MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fix_fields_if_needed under mysql_derived_prepare when derived is not yet prepared, leading to a find_field_in_table crash.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
mitreCNA
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
mariadbmariadb
10.4 ≤
𝑥
< 10.4.33
CNA
mariadbmariadb
10.5 ≤
𝑥
< 10.5.24
CNA
mariadbmariadb
10.6 ≤
𝑥
< 10.6.17
CNA
mariadbmariadb
10.7 ≤
𝑥
< 10.11.7
CNA
mariadbmariadb
11.0 ≤
𝑥
< 11.0.5
CNA
mariadbmariadb
11.1 ≤
𝑥
< 11.1.4
CNA