CVE-2023-52968

Source
https://nvd.nist.gov/vuln/detail/CVE-2023-52968
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52968.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-52968
Aliases
Related
Published
2025-03-08T23:15:13Z
Modified
2025-06-10T12:59:22.290516Z
Summary
[none]
Details

MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fixfieldsifneeded under mysqlderivedprepare when derived is not yet prepared, leading to a findfieldintable crash.

References

Affected packages

Debian:11 / mariadb-10.5

Package

Name
mariadb-10.5
Purl
pkg:deb/debian/mariadb-10.5?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:10.5.26-0+deb11u1

Affected versions

1:10.*

1:10.5.11-1
1:10.5.12-0+deb11u1
1:10.5.12-1
1:10.5.13-0+deb11u1
1:10.5.15-0+deb11u1
1:10.5.18-0+deb11u1
1:10.5.19-0+deb11u1
1:10.5.19-0+deb11u2
1:10.5.21-0+deb11u1
1:10.5.23-0+deb11u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}