Vulnerability · Published Mar 8, 2025 · Assigned by mitre

CVE-2023-52969

Medium 4.9

In plain English

A medium-severity security flaw in MariaDB from MariaDB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.9Medium
Exploit odds (30 days)0.5%top 59.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8Judy1.0.5-18.module_el8.10.0+3947+ac422511ALSA-2025:19572
AlmaLinux:8Judy1.0.5-18.module_el8.8.0+3620+5d452900ALSA-2025:19572
AlmaLinux:8Judy1.0.5-18.module_el8.10.0+3955+6534edafALSA-2026:6435
AlmaLinux:8Judy1.0.5-18.module_el8.10.0+3794+c6a66d65ALSA-2026:6435
AlmaLinux:8galera26.4.22-1.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:8galera26.4.23-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:9galera26.4.22-1.el9_6ALSA-2025:19584
AlmaLinux:9galera26.4.20-1.module_el9.5.0+135+c9657a87ALSA-2026:0247
AlmaLinux:8mariadb3:10.11.15-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:8mariadb3:10.5.29-2.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:9mariadb3:10.5.29-2.el9_6ALSA-2025:19584
AlmaLinux:9mariadb3:10.11.15-1.module_el9.7.0+199+a988ea01ALSA-2026:0247
AlmaLinux:8mariadb-backup3:10.11.15-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:8mariadb-backup3:10.5.29-2.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:9mariadb-backup3:10.11.15-1.module_el9.7.0+199+a988ea01ALSA-2026:0247
AlmaLinux:9mariadb-backup3:10.5.29-2.el9_6ALSA-2025:19584
AlmaLinux:10mariadb-common3:10.11.15-1.el10_1ALSA-2026:0136
AlmaLinux:8mariadb-common3:10.5.29-2.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:8mariadb-common3:10.11.15-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:9mariadb-common3:10.11.15-1.module_el9.7.0+199+a988ea01ALSA-2026:0247
AlmaLinux:9mariadb-common3:10.5.29-2.el9_6ALSA-2025:19584
AlmaLinux:8mariadb-devel3:10.11.15-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:8mariadb-devel3:10.5.29-2.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:9mariadb-devel3:10.11.15-1.module_el9.7.0+199+a988ea01ALSA-2026:0247
AlmaLinux:9mariadb-devel3:10.5.29-2.el9_6ALSA-2025:19584
AlmaLinux:8mariadb-embedded3:10.5.29-2.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:8mariadb-embedded3:10.11.15-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:9mariadb-embedded3:10.5.29-2.el9_6ALSA-2025:19584
AlmaLinux:9mariadb-embedded3:10.11.15-1.module_el9.7.0+199+a988ea01ALSA-2026:0247
AlmaLinux:8mariadb-embedded-devel3:10.5.29-2.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:8mariadb-embedded-devel3:10.11.15-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:9mariadb-embedded-devel3:10.11.15-1.module_el9.7.0+199+a988ea01ALSA-2026:0247
AlmaLinux:9mariadb-embedded-devel3:10.5.29-2.el9_6ALSA-2025:19584
AlmaLinux:10mariadb-errmsg3:10.11.15-1.el10_1ALSA-2026:0136
AlmaLinux:8mariadb-errmsg3:10.5.29-2.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:8mariadb-errmsg3:10.11.15-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:9mariadb-errmsg3:10.11.15-1.module_el9.7.0+199+a988ea01ALSA-2026:0247
AlmaLinux:9mariadb-errmsg3:10.5.29-2.el9_6ALSA-2025:19584
AlmaLinux:8mariadb-gssapi-server3:10.11.15-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:8mariadb-gssapi-server3:10.5.29-2.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:9mariadb-gssapi-server3:10.5.29-2.el9_6ALSA-2025:19584
AlmaLinux:9mariadb-gssapi-server3:10.11.15-1.module_el9.7.0+199+a988ea01ALSA-2026:0247
AlmaLinux:8mariadb-oqgraph-engine3:10.5.29-2.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:8mariadb-oqgraph-engine3:10.11.15-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:9mariadb-oqgraph-engine3:10.5.29-2.el9_6ALSA-2025:19584
AlmaLinux:9mariadb-oqgraph-engine3:10.11.15-1.module_el9.7.0+199+a988ea01ALSA-2026:0247
AlmaLinux:8mariadb-pam3:10.5.29-2.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:8mariadb-pam3:10.11.15-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:9mariadb-pam3:10.5.29-2.el9_6ALSA-2025:19584
AlmaLinux:9mariadb-pam3:10.11.15-1.module_el9.7.0+199+a988ea01ALSA-2026:0247
AlmaLinux:8mariadb-server3:10.5.29-2.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:8mariadb-server3:10.11.15-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:9mariadb-server3:10.11.15-1.module_el9.7.0+199+a988ea01ALSA-2026:0247
AlmaLinux:9mariadb-server3:10.5.29-2.el9_6ALSA-2025:19584
AlmaLinux:8mariadb-server-galera3:10.5.29-2.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:8mariadb-server-galera3:10.11.15-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:9mariadb-server-galera3:10.11.15-1.module_el9.7.0+199+a988ea01ALSA-2026:0247
AlmaLinux:9mariadb-server-galera3:10.5.29-2.el9_6ALSA-2025:19584
AlmaLinux:8mariadb-server-utils3:10.5.29-2.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:8mariadb-server-utils3:10.11.15-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:9mariadb-server-utils3:10.11.15-1.module_el9.7.0+199+a988ea01ALSA-2026:0247
AlmaLinux:9mariadb-server-utils3:10.5.29-2.el9_6ALSA-2025:19584
AlmaLinux:8mariadb-test3:10.11.15-1.module_el8.10.0+4152+4d93c53fALSA-2026:6435
AlmaLinux:8mariadb-test3:10.5.29-2.module_el8.10.0+4059+10818090ALSA-2025:19572
AlmaLinux:9mariadb-test3:10.5.29-2.el9_6ALSA-2025:19584
AlmaLinux:9mariadb-test3:10.11.15-1.module_el9.7.0+199+a988ea01ALSA-2026:0247
Debian:12mariadb1:10.11.13-0+deb12u1DEBIAN-CVE-2023-52969
Debian:13mariadb1:11.8.2-1DEBIAN-CVE-2023-52969
Debian:14mariadb1:11.8.2-1DEBIAN-CVE-2023-52969
Rocky Linux:8Judy0:1.0.5-18.module+el8.4.0+427+adf35707RLSA-2026:6435
Rocky Linux:8Judy0:1.0.5-18.module+el8.4.0+431+26aaed18RLSA-2025:19572
Rocky Linux:8Judy0:1.0.5-18.module+el8.10.0+1674+fa55eae9RLSA-2025:19572
Rocky Linux:8Judy0:1.0.5-18.module+el8.10.0+1925+356c22e8RLSA-2025:19572
Rocky Linux:8Judy0:1.0.5-18.module+el8.4.0+427+adf35707RLSA-2025:19572
Rocky Linux:8Judy0:1.0.5-18.module+el8.4.0+431+26aaed18RLSA-2026:6435
Rocky Linux:8Judy0:1.0.5-18.module+el8.10.0+1925+356c22e8RLSA-2026:6435
Rocky Linux:8Judy0:1.0.5-18.module+el8.10.0+40062+b4bfe4b1RLSA-2026:6435
Rocky Linux:8Judy0:1.0.5-18.module+el8.10.0+1674+fa55eae9RLSA-2026:6435
Rocky Linux:8galera0:26.4.22-1.module+el8.10.0+2082+43759dccRLSA-2025:19572
Rocky Linux:9galera0:26.4.22-1.el9_6RLSA-2025:19584
Rocky Linux:9galera0:26.4.20-1.module+el9.7.0+40024+12a6f3b4RLSA-2026:0247
Rocky Linux:8mariadb3:10.5.29-2.module+el8.10.0+2082+43759dccRLSA-2025:19572
Rocky Linux:9mariadb3:10.5.29-2.el9_6RLSA-2025:19584
Rocky Linux:9mariadb3:10.11.15-1.module+el9.7.0+40065+b33d0971RLSA-2026:0247
Rocky Linux:10mariadb10.113:10.11.15-1.el10_1RLSA-2026:0136
Ubuntu:24.04:LTSmariadb1:10.11.13-0ubuntu0.24.04.1USN-7548-1
Ubuntu:24.04:LTSmariadb1:10.11.13-0ubuntu0.24.04.1UBUNTU-CVE-2023-52969
Ubuntu:22.04:LTSmariadb-10.61:10.6.22-0ubuntu0.22.04.1USN-7519-1
Ubuntu:22.04:LTSmariadb-10.61:10.6.22-0ubuntu0.22.04.1UBUNTU-CVE-2023-52969

Affected products (as reported)

VendorProductVersions
MariaDB MariaDB 10.4 – before 10.5.*10.6 – before 10.6.*10.7 – before 10.11.*11.0 – before 11.0.*

Weakness: CWE-1038 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References