CVE-2023-52969

A flaw was found in MariaDB Server. This vulnerability may allow an attacker to cause a crash via an issue related to make_aggr_tables_info and optimize_stage2, resulting in an empty backtrace log.

Moderate-impact vulnerability affecting Red Hat Enterprise Linux streams that provide MariaDB 10.11. A network attacker with high privileges and no user interaction may trigger an issue in make_aggr_tables_info and optimize_stage2, causing MariaDB Server to crash and produce an empty backtrace log, resulting in a denial of service. Red Hat Enterprise Linux streams with MariaDB 10.3, including RHEL 7 ELS, are not affected because the vulnerable code is not present; Community Projects MariaDB streams are affected, and Red Hat In-Vehicle OS is affected with remediation deferred. For affected Red Hat streams marked DEFER, the current flaw records no more specific deferral rationale; the residual risk is the authenticated network-triggered MariaDB crash. Red Hat's CVSS 4.9 Moderate assessment matches the CVE.org assessment and vector.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.