CVE-2023-52971
CVE-2023-52971
This page contains facts from public vulnerability sources. Check the original advisory before updating.
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
CVSS 4.9 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Affected products and versions
mariadb
- Versions
- ≥ 10.10, < 10.11.*: Affected (custom)
- ≥ 11.0, < 11.4.*: Affected (custom)
No fix published
mariadb Debian:12
- Versions
- 1:10.11.11-0+deb12u1
- 1:10.11.3-1
- 1:10.11.3-2~exp1
- 1:10.11.4-1
- 1:10.11.4-1~deb12u1
- 1:10.11.5-1
- 1:10.11.5-2
- 1:10.11.5-3
- 1:10.11.6-0+deb12u1
- 1:10.11.6-1
- 1:10.11.6-2
- 1:10.11.6-2.1~exp1
- 1:10.11.7-1
- 1:10.11.7-2
- 1:10.11.7-3
- 1:10.11.7-4
- 1:10.11.8-1
- 1:10.11.9-0+deb12u1
- Affected ranges
- ECOSYSTEM: < 1:10.11.13-0+deb12u1
Update to 1:10.11.13-0+deb12u1
mariadb Debian:13
- Affected ranges
- ECOSYSTEM: < 1:11.8.2-1
Update to 1:11.8.2-1
mariadb Debian:14
- Affected ranges
- ECOSYSTEM: < 1:11.8.2-1
Update to 1:11.8.2-1
mariadb Ubuntu:24.04:LTS
- Versions
- 1:10.11.4-1
- 1:10.11.5-3
- 1:10.11.6-1
- 1:10.11.6-2
- 1:10.11.7-2ubuntu1
- 1:10.11.7-2ubuntu2
- 1:10.11.8-0ubuntu0.24.04.1
- 1:10.11.11-0ubuntu0.24.04.2
- Affected ranges
- ECOSYSTEM: < 1:10.11.13-0ubuntu0.24.04.1
Update to 1:10.11.13-0ubuntu0.24.04.1