CVE-2023-52971

A flaw was found in MariaDB Server. This vulnerability may allow an attacker to cause a crash via improper handling of join operations in JOIN::fix_all_splittings_in_plan.

Moderate impact: Red Hat Enterprise Linux systems using affected MariaDB 10.11 streams can be crashed by a network attacker with high privileges who triggers improper handling of join operations in JOIN::fix_all_splittings_in_plan. This is an availability-only issue, with no confidentiality or integrity impact, consistent with the CVSS 4.9 score. Some affected Red Hat Enterprise Linux streams have a DEFER resolution, so the residual risk is a privileged remote denial of service while the fix is deferred; other affected streams have a DELEGATED resolution, for which a fix is being pursued. Other Red Hat Enterprise Linux streams are not affected because the vulnerable code is not present. Affected Community Projects MariaDB 10.11 streams are also delegated.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.