PT-2025-10402 · Mariadb+9 · Mariadb Server+9

Published 2023-09-04 · Updated 2026-04-02 · CVE-2023-52969

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MariaDB Server versions 10.4 through 10.11., 11.0 through 11.0.

Description The issue may cause MariaDB Server to crash with an empty backtrace log. This could be related to the make aggr tables info and optimize stage2 functions.

Recommendations For versions 10.4 through 10.11., 11.0 through 11.0., consider disabling the make aggr tables info and optimize stage2 functions as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-696

CWE-1038

Related Identifiers

ALSA-2025:19572

ALSA-2025:19584

ALSA-2026:0136

ALSA-2026:0247

ALSA-2026:6435

ALT-PU-2025-7233

ALT-PU-2025-7238

ALT-PU-2025-7242

AZL-58073

AZL-58082

BDU:2025-06571

BDU:2025-15221

BIT-MARIADB-2023-52969

BIT-MARIADB-MIN-2023-52969

BIT-MYSQL-CLIENT-2023-52969

CESA-2025_19572

CVE-2023-52969

DLA-4154-1

ECHO-857B-24EA-79C0

INFSA-2025_19572

INFSA-2025_19584

MGASA-2025-0186

OESA-2025-1516

OESA-2025-1517

OESA-2025-1518

OESA-2025-1542

RHSA-2025:19572

RHSA-2025:19584

RHSA-2025_19572

RHSA-2025_19584

RHSA-2026:0136

RHSA-2026:0247

RHSA-2026:0334

RHSA-2026:0335

RHSA-2026:0376

RHSA-2026:6435

SUSE-SU-2025:03275-1

SUSE-SU-2025:4491-1

SUSE-SU-2025_03275-1

USN-7519-1

USN-7548-1

Affected Products

Alt Linux

Almalinux

Centos

Debian

Linuxmint

Mariadb Server

Red Hat

Rocky Linux

Suse

Ubuntu

References · 111

• https://osv.dev/vulnerability/ALSA-2026:0136 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52969 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1517 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-21096 · Security Note
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06571 · Security Note
• https://ubuntu.com/security/CVE-2023-52971 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7548-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52969 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7519-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0186 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mysql-client-2023-52969 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1516 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52969 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-58082 · Vendor Advisory