CVE-2023-52969: Medium severity MariaDB Server vulnerability
MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to makeaggrtablesinfo and optimizestage2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.11.15-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.6.24-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52969?
CVE-2023-52969 is classified as a severity issue due to the potential for crashes in MariaDB Server.
How do I fix CVE-2023-52969?
To fix CVE-2023-52969, upgrade your MariaDB Server to a version above 11.0.* that is not affected by this vulnerability.
Which versions of MariaDB Server are affected by CVE-2023-52969?
CVE-2023-52969 affects MariaDB Server versions 10.4 to 10.5.*, 10.6.*, 10.7 to 10.11.*, and 11.0.*.
What kind of issue does CVE-2023-52969 cause?
CVE-2023-52969 can cause the MariaDB Server to crash without producing a backtrace log.
Is there a workaround for CVE-2023-52969?
Currently, there are no known workarounds for CVE-2023-52969 other than updating to a patched version.