4.9
CVE-2023-52968
- EPSS 0.06%
- Published 08.03.2025 23:15:13
- Last modified 08.03.2025 23:15:13
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 calls fix_fields_if_needed under mysql_derived_prepare when derived is not yet prepared, leading to a find_field_in_table crash.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users. Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorMariaDB
≫
Product
MariaDB
Default Statusunknown
Version <
10.4.33
Version
10.4
Status
affected
Version <
10.5.24
Version
10.5
Status
affected
Version <
10.6.17
Version
10.6
Status
affected
Version <
10.11.7
Version
10.7
Status
affected
Version <
11.0.5
Version
11.0
Status
affected
Version <
11.1.4
Version
11.1
Status
affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.172 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| cve@mitre.org | 4.9 | 1.2 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
|
CWE-696 Incorrect Behavior Order
The product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways which may produce resultant weaknesses.