Read the docs
TI-2023-29277 Aliases CVE-2023-52969GHSA-gx7h-6fr6-j29h

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0…

Priority LOW 23CWE-1038Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00467 40th percentileScored 2026-11-07
Fix Fixed Red Hat: 9 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MariaDBMariaDB10.4 and later; 10.6 and later; 10.7 and later; 11.0 and later—No fix listedCNA
  • MariaDB VendorMariaDB Affected 10.4 and later; 10.6 and later; 10.7 and later; 11.0 and later Fixed in — No fix listed CNA

Remediation

Red Hat 9 advisories

  • RHSA-2026:49522 Released 2026-08-03 · Red Hat rating Important
    mariadb10.11 security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) mariadb-3:10.11.18-1.el10_0, mariadb-backup-3:10.11.18-1.el10_0, mariadb-client-utils-3:10.11.18-1.el10_0 +13
  • RHSA-2026:6435 Released 2026-04-02 · Red Hat rating Moderate
    mariadb:10.11 security update
    • Red Hat Enterprise Linux AppStream (v. 8) Judy-1.0.5-18.module+el8.10.0+21221+7bee72c1.aarch64::mariadb:10.11, Judy-1.0.5-18.module+el8.10.0+21221+7bee72c1.ppc64le::mariadb:10.11, Judy-1.0.5-18.module+el8.10.0+21221+7bee72c1.s390x::mariadb:10.11 +47
  • RHSA-2026:0376 Released 2026-01-08 · Red Hat rating Important
    mariadb10.11 security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) mariadb-3:10.11.15-1.el10_0, mariadb-backup-3:10.11.15-1.el10_0, mariadb-client-utils-3:10.11.15-1.el10_0 +13
Show 6 more Red Hat advisories
  • RHSA-2026:0334 Released 2026-01-08 · Red Hat rating Important
    mariadb:10.11 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) galera-26.4.20-1.module+el9.5.0+22578+dc54e53f.aarch64::mariadb:10.11, galera-26.4.20-1.module+el9.5.0+22578+dc54e53f.ppc64le::mariadb:10.11, galera-26.4.20-1.module+el9.5.0+22578+dc54e53f.s390x::mariadb:10.11 +47
  • RHSA-2026:0335 Released 2026-01-08 · Red Hat rating Important
    mariadb:10.11 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) galera-26.4.16-1.module+el9.4.0+21205+b026b850.aarch64::mariadb:10.11, galera-26.4.16-1.module+el9.4.0+21205+b026b850.ppc64le::mariadb:10.11, galera-26.4.16-1.module+el9.4.0+21205+b026b850.s390x::mariadb:10.11 +47
  • RHSA-2026:0247 Released 2026-01-07 · Red Hat rating Important
    mariadb:10.11 security update
    • Red Hat Enterprise Linux AppStream (v. 9) galera-26.4.20-1.module+el9.5.0+22578+dc54e53f.aarch64::mariadb:10.11, galera-26.4.20-1.module+el9.5.0+22578+dc54e53f.ppc64le::mariadb:10.11, galera-26.4.20-1.module+el9.5.0+22578+dc54e53f.s390x::mariadb:10.11 +47
  • RHSA-2026:0136 Released 2026-01-06 · Red Hat rating Important
    mariadb10.11 security update
    • Red Hat Enterprise Linux AppStream (v. 10) mariadb-3:10.11.15-1.el10_1, mariadb-backup-3:10.11.15-1.el10_1, mariadb-client-utils-3:10.11.15-1.el10_1 +13
  • RHSA-2025:19572 Released 2025-11-04 · Red Hat rating Moderate
    mariadb:10.5 security update
    • Red Hat Enterprise Linux AppStream (v. 8) Judy-1.0.5-18.module+el8.10.0+22630+cacda3f1.aarch64::mariadb:10.5, Judy-1.0.5-18.module+el8.10.0+22630+cacda3f1.ppc64le::mariadb:10.5, Judy-1.0.5-18.module+el8.10.0+22630+cacda3f1.s390x::mariadb:10.5 +47
  • RHSA-2025:19584 Released 2025-11-04 · Red Hat rating Moderate
    galera and mariadb security update
    • Red Hat Enterprise Linux AppStream (v. 9) galera-26.4.22-1.el9_6, mariadb-3:10.5.29-2.el9_6, mariadb-backup-3:10.5.29-2.el9_6 +9
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) mariadb-devel-3:10.5.29-2.el9_6, mariadb-embedded-devel-3:10.5.29-2.el9_6, mariadb-test-3:10.5.29-2.el9_6

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:0136
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2025:19572, RHSA-2026:6435
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:19584, RHSA-2026:0247
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:0376, RHSA-2026:49522
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:0335
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:0334
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2025:19584
Not affected: 2 products
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-52969
  2. 2026-10-03 Alias added: GHSA-gx7h-6fr6-j29h

References

Other 1

  • TI-2023-11776 MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via… CVSS 3.1CRITICAL 9.8
  • TI-2016-05707 Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB… CVSS 3.0CRITICAL 9.8
  • TI-2022-00687 Infinite loop in BN_mod_sqrt() reachable when parsing certificates CVSS 3.1HIGH 7.5
  • TI-2014-00217 OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly… CVSS 3.1HIGH 7.4
  • TI-2014-00188 The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0… CVSS 2.0MEDIUM 6.8
  • TI-2018-15259 zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if… CVSS 3.1HIGH 7.5
See all 459 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences