VDB
BDU%3A2025-06571
BDU%3A2025-06571
PUBLISHED
CVSS 4.900000095367432 MEDIUM
Уязвимость функций make_aggr_tables_info и optimize_stage2 системы управления базами данных MariaDB, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
4.900000095367432
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mariadb | mariadb | 10.4, 10.5, 10.6 |
| Novell Inc., Red Hat Inc., Сообщество свободного программного обеспечения, ООО «Ред Софт», MariaDB Foundation | OpenSUSE Leap, Red Hat Enterprise Linux, SUSE Linux Enterprise Module for Server Applications, SUSE Enterprise Storage, SUSE Linux Enterprise High Performance Computing, Suse Linux Enterprise Server, SUSE Manager Proxy, SUSE Manager Retail Branch Server, SUSE Manager Server, Debian GNU/Linux, РЕД ОС (запись в едином реестре российских программ №3751), SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise Real Time, SUSE Linux Enterprise Module for Package Hub, MariaDB | |
| MariaDB | MariaDB | 10.4, 10.5, 10.6 |
Timeline
- Mar 8, 2025 CVE Published
- Mar 8, 2025 PoC Published
- Mar 9, 2025 PoC Published
- Mar 9, 2025 PoC Published
- Mar 10, 2025 PoC Published
- Jun 9, 2025 CVE Updated
References
- https://jira.mariadb.org/browse/MDEV-32082 advisory
- https://security-tracker.debian.org/tracker/CVE-2023-52969 advisory
- https://www.suse.com/security/cve/CVE-2023-52969.html advisory
- https://access.redhat.com/security/cve/cve-2023-52969 url
- https://redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-mariadb-cve-2023-52968/?sphrase_id=966136 advisory
- https://alas.aws.amazon.com/AL2023/ALAS-2023-52969.html url