PT-2025-10404 · Mariadb+8 · Mariadb Server+8

Published 2023-09-04 · Updated 2026-04-02 · CVE-2023-52971

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MariaDB Server versions 10.10 through 11.4.*

Description The issue causes MariaDB Server to crash in JOIN::fix all splittings in plan.

Recommendations For MariaDB Server versions 10.10 through 11.4.*, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-696

CWE-1038

Related Identifiers

ALSA-2026:0136

ALSA-2026:0247

ALSA-2026:6435

ALT-PU-2025-7233

AZL-58079

BDU:2025-15222

BIT-MARIADB-2023-52971

BIT-MARIADB-MIN-2023-52971

BIT-MYSQL-CLIENT-2023-52971

CVE-2023-52971

ECHO-5EF4-B229-41D7

MGASA-2025-0186

RHSA-2026:0136

RHSA-2026:0247

RHSA-2026:0334

RHSA-2026:0335

RHSA-2026:0376

RHSA-2026:6435

SUSE-SU-2025:03275-1

SUSE-SU-2025_03275-1

USN-7548-1

Affected Products

Alt Linux

Almalinux

Debian

Linuxmint

Mariadb Server

Red Hat

Rocky Linux

Suse

Ubuntu

References · 75

• https://osv.dev/vulnerability/ALSA-2026:0136 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52969 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15222 · Security Note
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52971 · Security Note
• https://ubuntu.com/security/CVE-2023-52971 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7548-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-58079 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0186 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mariadb-min-2023-52971 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-1113SE18 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7548-1 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mariadb-2023-52971 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52971 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52971 · Vendor Advisory