CVE-2023-52971

EUVD-2023-59683
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
mitreCNA
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
mariadbmariadb
10.10 ≤
𝑥
< 10.12.0
CNA
mariadbmariadb
11.0 ≤
𝑥
< 11.5.0
CNA
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libmariadbd-devel
suse enterprise sap 15 SP6
10.11.14-150600.4.14.1
fixed
suse enterprise server 15 SP6
10.11.14-150600.4.14.1
fixed
libmariadbd19
suse enterprise sap 15 SP6
10.11.14-150600.4.14.1
fixed
suse enterprise server 15 SP6
10.11.14-150600.4.14.1
fixed
mariadb
suse enterprise sap 15 SP6
10.11.14-150600.4.14.1
fixed
suse enterprise server 15 SP6
10.11.14-150600.4.14.1
fixed
mariadb-client
suse enterprise sap 15 SP6
10.11.14-150600.4.14.1
fixed
suse enterprise server 15 SP6
10.11.14-150600.4.14.1
fixed
mariadb-errormessages
suse enterprise sap 15 SP6
10.11.14-150600.4.14.1
fixed
suse enterprise server 15 SP6
10.11.14-150600.4.14.1
fixed
mariadb-tools
suse enterprise sap 15 SP6
10.11.14-150600.4.14.1
fixed
suse enterprise server 15 SP6
10.11.14-150600.4.14.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
mariadb1011
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-backup
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-backup-debuginfo
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-client-utils
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-common
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-connect-engine
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-connect-engine-debuginfo
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-cracklib-password-check
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-cracklib-password-check-debuginfo
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-debuginfo
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-debugsource
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-devel
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-errmsg
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-gssapi-server
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-gssapi-server-debuginfo
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-oqgraph-engine
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-oqgraph-engine-debuginfo
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-pam
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-pam-debuginfo
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-rocksdb-engine
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-rocksdb-engine-debuginfo
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-server
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-server-debuginfo
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-server-utils
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-server-utils-debuginfo
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-sphinx-engine
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-sphinx-engine-debuginfo
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-test
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
mariadb1011-test-debuginfo
Amazon Linux 2023
3:10.11.11-1.amzn2023.0.2
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
mariadb
Azure Linux 3.0
0:10.11.11-1.azl3
fixed
Common Weakness Enumeration
References
https://jira.mariadb.org/browse/MDEV-32084