CVE-2023-52970
Description
A flaw was found in MariaDB Server. This vulnerability may allow an attacker to crash the database via Item_direct_view_ref::derived_field_transformer_for_where.
Statement
Moderate-impact vulnerability in Red Hat products using affected MariaDB components: a network-reachable attacker with high privileges can trigger Item_direct_view_ref::derived_field_transformer_for_where without user interaction, causing MariaDB Server to crash and resulting in a denial of service. The current record marks MariaDB in multiple Red Hat Enterprise Linux streams and Red Hat In-Vehicle OS as affected, with some streams deferred and others delegated; Community Projects are also delegated as affected. Remediation is deferred for the affected RHEL streams because the issue is moderate severity and exploitation requires high privileges, leaving residual risk of database-service interruption for privileged network attackers. Red Hat Enterprise Linux 7 MariaDB streams are not affected because the vulnerable code is not present.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 4.9 | N/A | 4.9 |
| Attack Vector | Network | N/A | Network |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | High | N/A | High |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | None | N/A | None |
| Integrity Impact | None | N/A | None |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
cve.org: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Understanding the Weakness (CWE)
Integrity
Technical Impact: Alter Execution Logic
The optimizations alter the order of execution resulting in side effects that were not intended by the original developer.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
