CVE-2023-52968 - Vulnerability Details - OpenCVE

MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fix_fields_if_needed under mysql_derived_prepare when derived is not yet prepared, leading to a find_field_in_table crash.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://jira.mariadb.org/browse/MDEV-32082
https://nvd.nist.gov/vuln/detail/CVE-2023-52968
https://www.cve.org/CVERecord?id=CVE-2023-52968

History

Mon, 10 Mar 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 10 Mar 2025 13:45:00 +0000

Type	Values Removed	Values Added
Title		mariadb: Crash in MariaDB Due to Improper Handling of Derived Tables
References		https://nvd.nist.gov/vuln/detail/CVE-2023-52968 https://www.cve.org/CVERecord?id=CVE-2023-52968
Metrics	threat_severity `None`	threat_severity `Moderate`

Sat, 08 Mar 2025 23:00:00 +0000

Type	Values Removed	Values Added
Description		MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fix_fields_if_needed under mysql_derived_prepare when derived is not yet prepared, leading to a find_field_in_table crash.
Weaknesses		CWE-696
References		https://jira.mariadb.org/browse/MDEV-32082
Metrics		cvssV3_1 `{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-03-08T00:00:00.000Z

Updated: 2025-03-10T15:59:46.152Z

Reserved: 2025-03-08T00:00:00.000Z

Link: CVE-2023-52968

Vulnrichment

Updated: 2025-03-10T15:59:43.194Z

NVD

Status : Received

Published: 2025-03-08T23:15:13.173

Modified: 2025-03-08T23:15:13.173

Link: CVE-2023-52968

Redhat

Severity : Moderate

Publid Date: 2025-03-08T00:00:00Z

Links: CVE-2023-52968 - Bugzilla

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-52968", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-03-10T15:59:46.152Z", "dateReserved": "2025-03-08T00:00:00.000Z", "datePublished": "2025-03-08T00:00:00.000Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "product": "MariaDB", "vendor": "MariaDB", "versions": [{"lessThan": "10.4.33", "status": "affected", "version": "10.4", "versionType": "custom"}, {"lessThan": "10.5.24", "status": "affected", "version": "10.5", "versionType": "custom"}, {"lessThan": "10.6.17", "status": "affected", "version": "10.6", "versionType": "custom"}, {"lessThan": "10.11.7", "status": "affected", "version": "10.7", "versionType": "custom"}, {"lessThan": "11.0.5", "status": "affected", "version": "11.0", "versionType": "custom"}, {"lessThan": "11.1.4", "status": "affected", "version": "11.1", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fix_fields_if_needed under mysql_derived_prepare when derived is not yet prepared, leading to a find_field_in_table crash."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-696", "description": "CWE-696 Incorrect Behavior Order", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2025-03-08T22:45:30.565Z"}, "references": [{"url": "https://jira.mariadb.org/browse/MDEV-32082"}], "x_generator": {"engine": "enrichogram 0.0.1"}, "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"}}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", "versionStartIncluding": "10.4", "versionEndExcluding": "10.4.33"}, {"vulnerable": true, "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", "versionStartIncluding": "10.5", "versionEndExcluding": "10.5.24"}, {"vulnerable": true, "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", "versionStartIncluding": "10.6", "versionEndExcluding": "10.6.17"}, {"vulnerable": true, "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", "versionStartIncluding": "10.7", "versionEndExcluding": "10.11.7"}, {"vulnerable": true, "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.0", "versionEndExcluding": "11.0.5"}, {"vulnerable": true, "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.1", "versionEndExcluding": "11.1.4"}]}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-10T15:58:35.517548Z", "id": "CVE-2023-52968", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-10T15:59:46.152Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52968", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-10T15:58:35.517548Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-10T15:59:43.194Z"}}], "cna": {"metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"}}], "affected": [{"vendor": "MariaDB", "product": "MariaDB", "versions": [{"status": "affected", "version": "10.4", "lessThan": "10.4.33", "versionType": "custom"}, {"status": "affected", "version": "10.5", "lessThan": "10.5.24", "versionType": "custom"}, {"status": "affected", "version": "10.6", "lessThan": "10.6.17", "versionType": "custom"}, {"status": "affected", "version": "10.7", "lessThan": "10.11.7", "versionType": "custom"}, {"status": "affected", "version": "11.0", "lessThan": "11.0.5", "versionType": "custom"}, {"status": "affected", "version": "11.1", "lessThan": "11.1.4", "versionType": "custom"}], "defaultStatus": "unknown"}], "references": [{"url": "https://jira.mariadb.org/browse/MDEV-32082"}], "x_generator": {"engine": "enrichogram 0.0.1"}, "descriptions": [{"lang": "en", "value": "MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fix_fields_if_needed under mysql_derived_prepare when derived is not yet prepared, leading to a find_field_in_table crash."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-696", "description": "CWE-696 Incorrect Behavior Order"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "10.4.33", "versionStartIncluding": "10.4"}, {"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "10.5.24", "versionStartIncluding": "10.5"}, {"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "10.6.17", "versionStartIncluding": "10.6"}, {"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "10.11.7", "versionStartIncluding": "10.7"}, {"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "11.0.5", "versionStartIncluding": "11.0"}, {"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "11.1.4", "versionStartIncluding": "11.1"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2025-03-08T22:45:30.565Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52968", "state": "PUBLISHED", "dateUpdated": "2025-03-10T15:59:46.152Z", "dateReserved": "2025-03-08T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2025-03-08T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"bugzilla": {"description": "mariadb: Crash in MariaDB Due to Improper Handling of Derived Tables", "id": "2350915", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2350915"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.9", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-696", "details": ["MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fix_fields_if_needed under mysql_derived_prepare when derived is not yet prepared, leading to a find_field_in_table crash.", "A flaw was found in MariaDB Server. This vulnerability may allow an attacker to cause a denial of service via improper handling of derived tables, where fix_fields_if_needed is called under mysql_derived_prepare before the derived table is prepared."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2023-52968", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "mariadb", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "mariadb:10.11/mariadb", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "mariadb:10.3/mariadb", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "mariadb:10.5/mariadb", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "mariadb-devel:10.3/mariadb", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "mariadb", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "mariadb:10.11/mariadb", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2025-03-08T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-52968\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-52968\nhttps://jira.mariadb.org/browse/MDEV-32082"], "threat_severity": "Moderate"}