p PatchFirst

CVE-2023-52968

CVE-2023-52968

This page contains facts from public vulnerability sources. Check the original advisory before updating.

MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fix_fields_if_needed under mysql_derived_prepare when derived is not yet prepared, leading to a find_field_in_table crash.

CVSS 4.9 · Medium · EPSS 0.5% · Fix available

Published
Updated

Stack: system · database

Affected products and versions

  • mariadb

    Versions
    • ≥ 10.4, < 10.4.33: Affected (custom)
    • ≥ 10.5, < 10.5.24: Affected (custom)
    • ≥ 10.6, < 10.6.17: Affected (custom)
    • ≥ 10.7, < 10.11.7: Affected (custom)
    • ≥ 11.0, < 11.0.5: Affected (custom)
    • ≥ 11.1, < 11.1.4: Affected (custom)

    Update to 10.11.7; Update to 10.4.33; Update to 10.5.24; Update to 10.6.17; Update to 11.0.5; Update to 11.1.4

  • mariadb-10.5 Debian:11

    Versions
    • 1:10.5.11-1
    • 1:10.5.12-0+deb11u1
    • 1:10.5.12-1
    • 1:10.5.13-0+deb11u1
    • 1:10.5.15-0+deb11u1
    • 1:10.5.18-0+deb11u1
    • 1:10.5.19-0+deb11u1
    • 1:10.5.19-0+deb11u2
    • 1:10.5.21-0+deb11u1
    • 1:10.5.23-0+deb11u1
    Affected ranges
    • ECOSYSTEM: < 1:10.5.26-0+deb11u1

    Update to 1:10.5.26-0+deb11u1

  • mariadb-10.0 Ubuntu:16.04:LTS

    Versions
    • 10.0.20-0ubuntu0.15.04.1
    • 10.0.22-0ubuntu1
    • 10.0.23-1
    • 10.0.23-2
    • 10.0.24-7
    • 10.0.25-0ubuntu0.16.04.1
    • 10.0.27-0ubuntu0.16.04.1
    • 10.0.28-0ubuntu0.16.04.1
    • 10.0.29-0ubuntu0.16.04.1
    • 10.0.31-0ubuntu0.16.04.2
    • 10.0.33-0ubuntu0.16.04.1
    • 10.0.34-0ubuntu0.16.04.1
    • 10.0.36-0ubuntu0.16.04.1
    • 10.0.38-0ubuntu0.16.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mariadb-10.1 Ubuntu:18.04:LTS

    Versions
    • 10.1.25-1
    • 1:10.1.29-6
    • 1:10.1.34-0ubuntu0.18.04.1
    • 1:10.1.38-0ubuntu0.18.04.1
    • 1:10.1.38-0ubuntu0.18.04.2
    • 1:10.1.40-0ubuntu0.18.04.1
    • 1:10.1.41-0ubuntu0.18.04.1
    • 1:10.1.43-0ubuntu0.18.04.1
    • 1:10.1.44-0ubuntu0.18.04.1
    • 1:10.1.47-0ubuntu0.18.04.1
    • 1:10.1.48-0ubuntu0.18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mariadb-10.3 Ubuntu:20.04:LTS

    Versions
    • 1:10.3.17-1
    • 1:10.3.18-1
    • 1:10.3.19-1
    • 1:10.3.21-2
    • 1:10.3.22-1
    • 1:10.3.22-1ubuntu1
    • 1:10.3.25-0ubuntu0.20.04.1
    • 1:10.3.29-0ubuntu0.20.04.1
    • 1:10.3.30-0ubuntu0.20.04.1
    • 1:10.3.31-0ubuntu0.20.04.1
    • 1:10.3.32-0ubuntu0.20.04.1
    • 1:10.3.34-0ubuntu0.20.04.1
    • 1:10.3.37-0ubuntu0.20.04.1
    • 1:10.3.38-0ubuntu0.20.04.1
    • 1:10.3.39-0ubuntu0.20.04.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mariadb-10.6 Ubuntu:22.04:LTS

    Versions
    • 1:10.6.7-2ubuntu1
    • 1:10.6.7-2ubuntu1.1
    • 1:10.6.11-0ubuntu0.22.04.1
    • 1:10.6.12-0ubuntu0.22.04.1
    • 1:10.6.16-0ubuntu0.22.04.1
    • 1:10.6.18-0ubuntu0.22.04.1
    • 1:10.6.21-0ubuntu0.22.04.2
    • 1:10.6.22-0ubuntu0.22.04.1
    • 1:10.6.23-0ubuntu0.22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mariadb Ubuntu:24.04:LTS

    Versions
    • 1:10.11.4-1
    • 1:10.11.5-3
    • 1:10.11.6-1
    • 1:10.11.6-2
    • 1:10.11.7-2ubuntu1
    • 1:10.11.7-2ubuntu2
    • 1:10.11.8-0ubuntu0.24.04.1
    • 1:10.11.11-0ubuntu0.24.04.2
    • 1:10.11.13-0ubuntu0.24.04.1
    • 1:10.11.14-0ubuntu0.24.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →