medium4.9
CVE-2023-52968
MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 cal…
Impact
MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fix_fields_if_needed under mysql_derived_prepare when derived is not yet prepared, leading to a find_field_in_table crash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| MariaDB | MariaDB Server 10.4 | before 10.4.33 |
| 10.5 | before 10.5.24 | |
| 10.6 | before 10.6.17 | |
| 10.7 | through 10.11 | |
| 11.0 | before 11.0.5 | |
| And 11.1 | before 11.1.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.