CVE-2023-52970
CVE-2023-52970
This page contains facts from public vulnerability sources. Check the original advisory before updating.
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where.
CVSS 4.9 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Affected products and versions
mariadb
- Versions
- ≥ 10.4, < 10.5.*: Affected (custom)
- ≥ 10.6, < 10.6.*: Affected (custom)
- ≥ 10.7, < 10.11.*: Affected (custom)
- ≥ 11.0, < 11.0.*: Affected (custom)
- ≥ 11.1, < 11.4.*: Affected (custom)
No fix published
mariadb Debian:12
- Versions
- 1:10.11.11-0+deb12u1
- 1:10.11.3-1
- 1:10.11.3-2~exp1
- 1:10.11.4-1
- 1:10.11.4-1~deb12u1
- 1:10.11.5-1
- 1:10.11.5-2
- 1:10.11.5-3
- 1:10.11.6-0+deb12u1
- 1:10.11.6-1
- 1:10.11.6-2
- 1:10.11.6-2.1~exp1
- 1:10.11.7-1
- 1:10.11.7-2
- 1:10.11.7-3
- 1:10.11.7-4
- 1:10.11.8-1
- 1:10.11.9-0+deb12u1
- Affected ranges
- ECOSYSTEM: < 1:10.11.13-0+deb12u1
Update to 1:10.11.13-0+deb12u1
mariadb Debian:13
- Affected ranges
- ECOSYSTEM: < 1:11.8.2-1
Update to 1:11.8.2-1
mariadb Debian:14
- Affected ranges
- ECOSYSTEM: < 1:11.8.2-1
Update to 1:11.8.2-1
mariadb-10.6 Ubuntu:22.04:LTS
- Versions
- 1:10.6.7-2ubuntu1
- 1:10.6.7-2ubuntu1.1
- 1:10.6.11-0ubuntu0.22.04.1
- 1:10.6.12-0ubuntu0.22.04.1
- 1:10.6.16-0ubuntu0.22.04.1
- 1:10.6.18-0ubuntu0.22.04.1
- 1:10.6.21-0ubuntu0.22.04.2
- Affected ranges
- ECOSYSTEM: < 1:10.6.22-0ubuntu0.22.04.1
Update to 1:10.6.22-0ubuntu0.22.04.1
mariadb Ubuntu:24.04:LTS
- Versions
- 1:10.11.4-1
- 1:10.11.5-3
- 1:10.11.6-1
- 1:10.11.6-2
- 1:10.11.7-2ubuntu1
- 1:10.11.7-2ubuntu2
- 1:10.11.8-0ubuntu0.24.04.1
- 1:10.11.11-0ubuntu0.24.04.2
- Affected ranges
- ECOSYSTEM: < 1:10.11.13-0ubuntu0.24.04.1
Update to 1:10.11.13-0ubuntu0.24.04.1