PT-2025-10401 · Mariadb+1 · Mariadb Server+1

Published 2023-09-04 · Updated 2025-06-10 · CVE-2023-52968

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MariaDB Server versions 10.4 through 10.4.32 MariaDB Server versions 10.5 through 10.5.23 MariaDB Server versions 10.6 through 10.6.16 MariaDB Server versions 10.7 through 10.11.6 MariaDB Server versions 11.0 through 11.0.4 MariaDB Server versions 11.1 through 11.1.3

Description The issue arises when fix fields if needed is called under mysql derived prepare when derived is not yet prepared, leading to a find field in table crash.

Recommendations For versions 10.4 through 10.4.32, update to version 10.4.33 or later. For versions 10.5 through 10.5.23, update to version 10.5.24 or later. For versions 10.6 through 10.6.16, update to version 10.6.17 or later. For versions 10.7 through 10.11.6, update to version 10.11.7 or later. For versions 11.0 through 11.0.4, update to version 11.0.5 or later. For versions 11.1 through 11.1.3, update to version 11.1.4 or later.

Fix

LPE

Weakness Enumeration

CWE-696

Related Identifiers

BDU:2025-06571

BIT-MARIADB-2023-52968

BIT-MARIADB-MIN-2023-52968

BIT-MYSQL-CLIENT-2023-52968

CVE-2023-52968

Affected Products

Mariadb Server

Red Os

References · 25

• https://nvd.nist.gov/vuln/detail/CVE-2023-52968 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-52969 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52968 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06571 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-52968 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52968 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mariadb-2023-52968 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52968 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mariadb-min-2023-52968 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52968 · Security Note
• https://osv.dev/vulnerability/BIT-mysql-client-2023-52968 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52968 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52968 · Vendor Advisory
• https://t.me/cvedetector/19909 · Telegram Post
• https://suse.com/security/cve/CVE-2023-52969.html · Note