Skip to content
fr Sign in
4.9 Medium

CVE-2023-52970 MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through…

Description

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where.

Affected products and versions

Product Affected versions Fixed in
MariaDB 11.1 11.1 → latest No fix stated
MariaDB 11.0 11.0 → latest No fix stated
MariaDB 10.7 10.7 → latest No fix stated
MariaDB 10.6 10.6 → latest No fix stated
MariaDB 10.4 10.4 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of MariaDB

The 13 CVEs of MariaDB →
CVE-2026-35549 An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2 6.5 Medium CVE-2025-13699 MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability 7.0 High CVE-2023-52968 MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0… 4.9 Medium CVE-2023-52971 MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan 4.9 Medium
Track this CVE