CVE-2023-52968

EUVD-2023-59686
MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fix_fields_if_needed under mysql_derived_prepare when derived is not yet prepared, leading to a find_field_in_table crash.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
mitreCNA
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
mariadbmariadb
10.4 ≤
𝑥
< 10.4.33
CNA
mariadbmariadb
10.5 ≤
𝑥
< 10.5.24
CNA
mariadbmariadb
10.6 ≤
𝑥
< 10.6.17
CNA
mariadbmariadb
10.7 ≤
𝑥
< 10.11.7
CNA
mariadbmariadb
11.0 ≤
𝑥
< 11.0.5
CNA
mariadbmariadb
11.1 ≤
𝑥
< 11.1.4
CNA
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
mariadb105
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-backup
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-backup-debuginfo
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-common
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-connect-engine
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-connect-engine-debuginfo
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-cracklib-password-check
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-cracklib-password-check-debuginfo
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-debuginfo
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-debugsource
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-devel
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-errmsg
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-gssapi-server
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-gssapi-server-debuginfo
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-oqgraph-engine
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-oqgraph-engine-debuginfo
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-pam
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-pam-debuginfo
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-rocksdb-engine
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-rocksdb-engine-debuginfo
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-server
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-server-debuginfo
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-server-utils
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-server-utils-debuginfo
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-sphinx-engine
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-sphinx-engine-debuginfo
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-test
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
mariadb105-test-debuginfo
Amazon Linux 2023
3:10.5.25-1.amzn2023.0.1
fixed
Common Weakness Enumeration
References
https://jira.mariadb.org/browse/MDEV-32082