CVE-2023-52969

What it actually does

The flaw triggers a server crash with an empty backtrace during query optimization, specifically in make_aggr_tables_info and optimize_stage2 functions, leading to denial of service.

Why it matters to the business

Database service interruptions can cause application downtime and operational delays; low EPSS score and absence from KEV indicate limited immediate risk despite the 602-day window since publication.

How an attack unfolds

An authenticated high-privilege user submits crafted queries that exercise the affected optimizer paths, causing the MariaDB server process to terminate unexpectedly.

How to fix it

Upgrade affected packages to the listed fixed versions: firefox (Red Hat:rhel_eus:8.1::appstream) to 0:91.3.0-1.el8_1 and corresponding debug packages; apply vendor patches for MariaDB 10.4-11.0 streams where applicable.

How to confirm the fix worked

Confirm server version is updated, reproduce test queries that previously crashed the service, and verify stable operation with non-empty backtraces on errors.

Typical attack path

1. Obtain high-privilege database credentials
2. Issue queries that invoke make_aggr_tables_info or optimize_stage2
3. Observe server crash and empty backtrace

How to detect it

Review database error logs and crash reports for empty backtrace entries around optimize_stage2 activity; correlate with high-privilege query logs.

What your security team should do

• Prioritize patching MariaDB instances matching the affected version ranges
• Monitor EPSS trend for any increase above 0.01
• Restrict high-privilege accounts to trusted sources only