CVE-2023-52968
Medium
Description
MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fix_fields_if_needed under mysql_derived_prepare when derived is not yet prepared, leading to a find_field_in_table crash.
SeverityMedium
CVSS4.9
Exploit probability—
Product
MariaDB
PublishedMar 8, 2025
First seenMar 8, 2025
Weakness typeCWE-696CWE-696
How to fix
Update
- MariaDB MariaDB10.4.33, 10.5.24, 10.6.17, 10.11.7, 11.0.5, 11.1.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| MariaDB MariaDB | 10.4 ≤ v < 10.4.33, 10.5 ≤ v < 10.5.24, 10.6 ≤ v < 10.6.17, 10.7 ≤ v < 10.11.7, 11.0 ≤ v < 11.0.5, 11.1 ≤ v < 11.1.4 | 10.4.33, 10.5.24, 10.6.17, 10.11.7, 11.0.5, 11.1.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.