CVE-2023-52968

State: Published
Severity: 4.9 Medium
Published: Mar 8, 2025
Updated: Mar 10, 2025
Reserved: Mar 8, 2025

Description

MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fix_fields_if_needed under mysql_derived_prepare when derived is not yet prepared, leading to a find_field_in_table crash.

Scores

CVSS	Score	Vector	Source
3.1	4.9 Medium	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H	mitre

Weaknesses

CWE-696 Incorrect Behavior Order

Affected Products

Product	Versions
MariaDBMariaDB	10.4 to before 10.4.33Affected 10.5 to before 10.5.24Affected 10.6 to before 10.6.17Affected 10.7 to before 10.11.7Affected 11.0 to before 11.0.5Affected 11.1 to before 11.1.4Affected

References

https://jira.mariadb.org/browse/MDEV-32082

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.