BIT-mariadb-2023-52968

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/mariadb/BIT-mariadb-2023-52968.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-mariadb-2023-52968

Aliases

Published

2025-03-13T07:14:21.149Z

Modified

2025-03-13T08:11:57.664787Z

Summary

[none]

Details

MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fixfieldsifneeded under mysqlderivedprepare when derived is not yet prepared, leading to a findfieldintable crash.

Database specific

{
    "cpes": [
        "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*"
    ],
    "severity": "Medium"
}

References

https://jira.mariadb.org/browse/MDEV-32082

Affected packages

Bitnami / mariadb

Package

Name: mariadb
Purl: pkg:bitnami/mariadb

Severity

4.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

10.4.0

Fixed

10.4.33

Introduced

10.5.0

Fixed

10.5.24

Introduced

10.6.0

Fixed

10.6.17

Introduced

10.7.0

Fixed

10.11.7

Introduced

11.0.0

Fixed

11.0.5

Introduced

11.1.0

Fixed

11.1.4