Fluid Attacks Database

Description

MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 14	mariadb	>=0 <1:11.8.2-1	1:11.8.2-1
debian 13	mariadb	>=0 <1:11.8.2-1	1:11.8.2-1
debian 12	mariadb	=1:10.11.11-0+deb12u1 \|\| =1:10.11.3-1 \|\| =1:10.11.3-2~exp1 \|\| =1:10.11.4-1 \|\| =1:10.11.4-1~deb12u1 \|\| =1:10.11.5-1 \|\| =1:10.11.5-2 \|\| =1:10.11.5-3 \|\| =1:10.11.6-0+deb12u1 \|\| =1:10.11.6-1 \|\| =1:10.11.6-2 \|\| =1:10.11.6-2.1~exp1 \|\| =1:10.11.7-1 \|\| =1:10.11.7-2 \|\| =1:10.11.7-3 \|\| =1:10.11.7-4 \|\| =1:10.11.8-1 \|\| =1:10.11.9-0+deb12u1 \|\| >=0 <1:10.11.13-0+deb12u1	1:10.11.13-0+deb12u1
rpm rhel9.6	mariadb	<3:10.11.15-1.module+el9.6.0+23803+16eaad56	3:10.11.15-1.module+el9.6.0+23803+16eaad56
rpm rhel8	mariadb	<3:10.11.15-1.module+el8.10.0+24010+d874728a	3:10.11.15-1.module+el8.10.0+24010+d874728a
rpm rhel9	mariadb	<3:10.11.15-1.module+el9.7.0+23768+0a6844e9	3:10.11.15-1.module+el9.7.0+23768+0a6844e9
rpm rhel9.4	mariadb	<3:10.11.15-1.module+el9.4.0+23801+22792e5c	3:10.11.15-1.module+el9.4.0+23801+22792e5c
rpm rhel10	mariadb10.11	<3:10.11.15-1.el10_1	3:10.11.15-1.el10_1
rpm rhel10.0	mariadb10.11	<3:10.11.15-1.el10_0	3:10.11.15-1.el10_0

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.