{"schemaVersion":3,"id":"CVE-2023-52971","aliases":["UBUNTU-CVE-2023-52971","DEBIAN-CVE-2023-52971","CGA-42wg-wh92-m6fm","CGA-5v7p-vfgg-f48w","CGA-6q4w-5pgc-q58m","CGA-7f35-7mj6-2798","CGA-945g-54c3-r66g","CGA-9wfj-w42w-q7r6","CGA-c86q-5j9x-q2x6","CGA-ffr8-3jff-8jrw","CGA-frvj-r9hv-qc43","CGA-j492-3v9f-h7q7","CGA-q2hw-p92g-j6fh","CGA-q647-xh9w-fchc","CGA-vh3f-x7c4-fgrq","CGA-vph9-hgfq-mw9j","CGA-xjv5-3j5g-w478"],"status":"published","duplicateOf":null,"title":null,"description":"MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.","dates":{"published":"2025-03-08T00:00:00.000Z","modified":"2025-05-12T15:31:11.074Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.9,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":4.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","exploitability":3.1,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":4.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","exploitability":3.1,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00499,"percentile":0.41506,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.005999999999999929,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00493},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00489,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00489,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00489,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00489,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00489,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00489,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00489,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00499,"percentile":0.41506}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00489,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00489,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00489,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00489,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00489,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00489,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00489,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00499,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00499,"percentile":0.41506}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-1038","name":"Insecure Automated Optimizations","description":"The product uses a mechanism that automatically optimizes code, e.g. to improve a characteristic such as performance, but the optimizations can have an unintended side effect that might violate an intended security assumption.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"Low","url":"https://cwe.mitre.org/data/definitions/1038.html"}],"affected":[{"vendor":"chainguard","product":"mariadb-10.11","name":"mariadb-10.11","label":"mariadb-10.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mariadb-10.11","purlType":"apk","versions":[{"text":"< 10.11.14-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.11.14-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mariadb-10.11-embedded","name":"mariadb-10.11-embedded","label":"mariadb-10.11-embedded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mariadb-10.11-embedded","purlType":"apk","versions":[{"text":"< 10.11.19-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.11.19-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mariadb-11.2","name":"mariadb-11.2","label":"mariadb-11.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mariadb-11.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mariadb-11.4","name":"mariadb-11.4","label":"mariadb-11.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mariadb-11.4","purlType":"apk","versions":[{"text":"< 11.4.8-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.4.8-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mariadb-11.5","name":"mariadb-11.5","label":"mariadb-11.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mariadb-11.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mariadb-11.6","name":"mariadb-11.6","label":"mariadb-11.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mariadb-11.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mariadb-11.7","name":"mariadb-11.7","label":"mariadb-11.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mariadb-11.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mariadb-11.8","name":"mariadb-11.8","label":"mariadb-11.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mariadb-11.8","purlType":"apk","versions":[{"text":"< 11.8.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.8.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"mariadb-10.11","name":"mariadb-10.11","label":"mariadb-10.11","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/mariadb-10.11","purlType":"apk","versions":[{"text":"< 10.11.14-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.11.14-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"mariadb-10.11-embedded","name":"mariadb-10.11-embedded","label":"mariadb-10.11-embedded","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/mariadb-10.11-embedded","purlType":"apk","versions":[{"text":"< 10.11.19-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.11.19-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"mariadb-11.2","name":"mariadb-11.2","label":"mariadb-11.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/mariadb-11.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"mariadb-11.4","name":"mariadb-11.4","label":"mariadb-11.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/mariadb-11.4","purlType":"apk","versions":[{"text":"< 11.4.8-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.4.8-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"mariadb-11.5","name":"mariadb-11.5","label":"mariadb-11.5","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/mariadb-11.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"mariadb-11.6","name":"mariadb-11.6","label":"mariadb-11.6","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/mariadb-11.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"mariadb-11.7","name":"mariadb-11.7","label":"mariadb-11.7","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/mariadb-11.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"mariadb-11.8","name":"mariadb-11.8","label":"mariadb-11.8","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/mariadb-11.8","purlType":"apk","versions":[{"text":"< 11.8.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.8.2-r1","eol":null,"hubHref":null},{"vendor":"debian","product":"mariadb","name":"mariadb","label":"mariadb","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/mariadb","purlType":"deb","versions":[{"text":"< 1:10.11.13-0+deb12u1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:11.8.2-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:10.11.13-0+deb12u1 | < 1:11.8.2-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"mariadb","name":"mariadb","label":"mariadb","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/mariadb","purlType":"deb","versions":[{"text":"< 1:10.11.13-0ubuntu0.24.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:10.11.13-0ubuntu0.24.04.1","eol":null,"hubHref":null},{"vendor":"mariadb","product":"mariadb","name":"mariadb","label":"mariadb","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.10, < 10.11.*","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.0, < 11.4.*","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.10, < 10.11.* | ≥ 11.0, < 11.4.*","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"mariadb","label":"MariaDB","category":"database"}},"hubHref":"/vendor/mariadb/mariadb"}],"affectedCount":19,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://jira.mariadb.org/browse/MDEV-32084","label":"jira.mariadb.org/browse/MDEV-32084","hostname":"jira.mariadb.org","tags":[]},{"url":"https://ubuntu.com/security/CVE-2023-52971","label":"ubuntu.com/security/CVE-2023-52971","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-52971","label":"www.cve.org/CVERecord?id=CVE-2023-52971","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7548-1","label":"ubuntu.com/security/notices/USN-7548-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-52971","label":"security-tracker.debian.org/tracker/CVE-2023-52971","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52971","label":"nvd.nist.gov/vuln/detail/CVE-2023-52971","hostname":"nvd.nist.gov","tags":["Oval","Advisory"]}],"lineage":{"upstream":[],"downstream":["MGASA-2025-0186","RHSA-2026:0136","RHSA-2026:0247","RHSA-2026:0334","RHSA-2026:0335","RHSA-2026:0376","RHSA-2026:49522","RHSA-2026:6435","SUSE-SU-2025:03275-1","USN-7548-1"],"duplicates":[],"related":["CGA-PFMC-H587-QQ7C","SUSE-SU-2025:03275-1","USN-7548-1"]},"timeline":[{"kind":"published","date":"2025-03-08T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-05-12T15:31:11.074Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":20,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T04:24:14.346Z","stale":false,"partial":false}}