CVE-2023-52969: mariadb Insecure Automated Optimizations
CVSS: 4.9v3.1MediumDeferred
AliasesUBUNTU-CVE-2023-52969DEBIAN-CVE-2023-52969CGA-57fr-pxm9-3rqjCGA-5q89-3m44-7vm4CGA-673j-6hj4-rvphCGA-6mwp-2h8x-xvcmCGA-94pf-834q-hh67CGA-f4m3-68pm-97rmCGA-g2m5-pvqm-p44pCGA-gx4m-2grx-jh88CGA-mq3q-vxhp-m7j6CGA-p32g-f5pm-mrxqCGA-ph94-g7jh-w3fcCGA-pw6j-xf24-mj7gCGA-r7j5-5xqh-q9vpCGA-rg4f-jgm2-7jvvCGA-v6w6-4g96-9mfqCGA-x476-jmg8-vfh6CGA-xjxq-27p2-83m2
Published 08-03-2025Last modified 03-11-2025
Vulnerability summary
CVE-2023-52969 is a medium (CVSS 4.9) Insecure Automated Optimizations vulnerability in mariadb. EPSS estimates a 0.47% chance of exploitation in the next 30 days, higher than 39.1% of scored vulnerabilities.
CVSS score
4.9/10
010
Medium · v3.1 (CVE.org)EPSS score
0.47%
0%100%
Low · +0.01 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 15 · Related 5Timeline
- 08-03-2025PublishedVulnerability first disclosed.
- 03-11-2025Last modifiedVulnerability information updated.
Description
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.
CVSS metrics
4 scores · 4 sources · 1 versionMedium 4.9Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated4.9MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated4.9MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- NVDNIST4.9MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.47%
Chance of exploitation in the next 30 days
Percentile
39%
Versus all other CVEs
30-day change
+0.01 pp
From 0.46% on 19-09-2026
19-09-202619-10-2026
EPSS score0.47%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard9 products
- mariadb-10.11< 10.11.14-r0
- mariadb-10.11-embedded< 10.11.19-r2
- mariadb-10.6< 10.6.23-r0
- mariadb-11.2All versions (No fix recorded)
- mariadb-11.4< 11.4.8-r0
Wolfi9 products
- mariadb-10.11< 10.11.14-r0
- mariadb-10.11-embedded< 10.11.19-r2
- mariadb-10.6< 10.6.23-r0
- mariadb-11.2All versions (No fix recorded)
- mariadb-11.4< 11.4.8-r0
Ubuntu2 products
- mariadb< 1:10.11.13-0ubuntu0.24.04.1
- mariadb-10.6< 1:10.6.22-0ubuntu0.22.04.1
Debian1 product
- mariadb< 1:10.11.13-0+deb12u1 | < 1:11.8.2-1
Mariadb1 product
- mariadb≥ 10.4, < 10.5.* | ≥ 10.6, < 10.6.* | ≥ 10.7, < 10.11.* | ≥ 11.0, < 11.0.*
5 vendors · 22 products
