CVE-2023-52971: Medium severity MariaDB MariaDB Server vulnerability
Published Mar 8, 2025
·Updated
MariaDB Server 10.10 through 10.11. and 11.0 through 11.4. crashes in JOIN::fixallsplittingsinplan.
Affected Software
1 affected component
MariaDB MariaDB Server>=10.10<=10.11.*, >=11.0<=11.4.*
Event History
Mar 8, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via Red Hat·11:01 PM
DescriptionSeverityAffected Software
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-52971?
CVE-2023-52971 has been classified with a high severity due to its potential to crash the MariaDB Server.
2
How do I fix CVE-2023-52971?
To mitigate CVE-2023-52971, upgrade your MariaDB Server to a version beyond 11.4 or apply any recommended patches provided by the vendor.
3
Which versions of MariaDB are affected by CVE-2023-52971?
CVE-2023-52971 affects MariaDB Server versions 10.10 through 10.11.* and 11.0 through 11.4.*.
4
What type of vulnerability is CVE-2023-52971?
CVE-2023-52971 is a denial of service vulnerability resulting in server crashes.
5
Is there a workaround for CVE-2023-52971?
Currently, the recommended approach is to upgrade to a non-affected version rather than a specific workaround.