CVE-2023-52971 MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MariaDB Server Crashes Linked to CVEs 2023-52969 and 2023-52971 MariaDB Server versions 10.4 through 11.0 are affected by CVE-2023-52969, which can cause crashes with an empty backtrace log, potentially linked to specific functions. Additionally, CVE-2023-52971 affects versions 10.10 through 11.4, leading to crashes in the JOIN operation. Both vulnerabilities were published on March 8, 2025. 2 sources 41