Insecure automated optimizations in MariaDB - CVE-2023-52971

Vulnerability identifier: #VU121008

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-52971

CWE-ID: CWE-1038

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to perform a denial of service attack.

The vulnerability exists due to insecure automated optimization in JOIN::fix_all_splittings_in_plan. A remote user can crash the database server.

MariaDB
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
Galera for Ericsson 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Server Applications Module
SUSE Package Hub 15
openSUSE Leap
Ubuntu
Fedora
IBM Cloud Object Storage Systems
mariadb10.11
mariadb (Ubuntu package)
mariadb-debugsource
mariadb-errormessages
mariadb-tools-debuginfo
mariadb-tools
mariadb
mariadb-client
mariadb-galera
mariadb-test-debuginfo
mariadb-client-debuginfo
libmariadbd-devel
libmariadbd19
mariadb-test
mariadb-bench
mariadb-bench-debuginfo
mariadb-rpm-macros
mariadb-debuginfo
libmariadbd19-debuginfo
mariadb10.11 (Red Hat package)

Install updates from vendor's website.

MariaDB - addressed in versions 10.11.12, 11.4.6, 11.8.2
IBM Cloud Object Storage Systems - addressed in versions 3.20.0.43, 3.20.0.69
mariadb10.11 - addressed in versions 10.11.11-1.fc40, 10.11.11-1.fc41
mariadb (Ubuntu package) - addressed in versions 1:10.11.13-0ubuntu0.24.04.1, 1:11.4.7-0ubuntu0.25.04.1
mariadb-debugsource - update to 10.11.14-150600.4.14.1
mariadb-errormessages - update to 10.11.14-150600.4.14.1
mariadb-tools-debuginfo - update to 10.11.14-150600.4.14.1
mariadb-tools - update to 10.11.14-150600.4.14.1
mariadb - update to 10.11.14-150600.4.14.1
mariadb-client - update to 10.11.14-150600.4.14.1
mariadb-galera - update to 10.11.14-150600.4.14.1
mariadb-test-debuginfo - update to 10.11.14-150600.4.14.1
mariadb-client-debuginfo - update to 10.11.14-150600.4.14.1
libmariadbd-devel - update to 10.11.14-150600.4.14.1
libmariadbd19 - update to 10.11.14-150600.4.14.1
mariadb-test - update to 10.11.14-150600.4.14.1
mariadb-bench - update to 10.11.14-150600.4.14.1
mariadb-bench-debuginfo - update to 10.11.14-150600.4.14.1
mariadb-rpm-macros - update to 10.11.14-150600.4.14.1
mariadb-debuginfo - update to 10.11.14-150600.4.14.1
libmariadbd19-debuginfo - update to 10.11.14-150600.4.14.1
mariadb10.11 (Red Hat package) - update to 10.11.15-1.el10_1

• https://jira.mariadb.org/browse/MDEV-32084

• Multiple DoS vulnerabilities in MariaDB Server
• Fedora 41 update for mariadb10.11
• Fedora 40 update for mariadb10.11
• Red Hat Enterprise Linux 10 update for mariadb10.11
• SUSE update for mariadb
• Red Hat Enterprise Linux 9 update for the mariadb:10.11 module
• Ubuntu update for mariadb
• Multiple vulnerabilities in IBM Cloud Object System