CVE-2023-52971

What it actually does

The vulnerability triggers a crash in the MariaDB query planner during JOIN::fix_all_splittings_in_plan when processing certain JOIN operations, resulting in denial of service.

Why it matters to the business

Database service interruptions that require manual restarts, leading to temporary loss of application functionality and potential compliance issues for availability-critical workloads.

How an attack unfolds

An attacker with high-privilege database access crafts and submits a specially formed SQL statement containing JOIN clauses that reach the vulnerable code path in the query optimizer, causing an immediate server crash.

How to fix it

Upgrade openshift-serverless-clients to version 0:0.25.1-1.el8 or later; apply vendor-supplied MariaDB patches for versions 10.10-10.11 and 11.0-11.4; restrict high-privilege accounts to trusted networks.

How to confirm the fix worked

Verify the installed package version matches or exceeds the fixed release; attempt reproduction queries in a test environment and confirm the server no longer crashes; review release notes for the planner fix.

Typical attack path

1. Obtain high-privilege database credentials
2. Connect to the MariaDB instance over the network
3. Issue a crafted JOIN query that exercises the fix_all_splittings_in_plan function
4. Observe server crash and loss of connectivity

How to detect it

Inspect MariaDB error logs for segmentation faults or assertions referencing JOIN::fix_all_splittings_in_plan; correlate abrupt connection drops with privileged-user query activity in the general query log.

• JOIN::fix_all_splittings_in_plan
• mysqld: ready for connections
• Segmentation fault
• Assertion failed

What your security team should do

• Apply the fixed package version immediately due to the 602-day exposure window
• Audit and minimize accounts holding high-privilege database access
• Enable query logging for privileged users and monitor for unusual JOIN patterns
• Test failover and restart procedures for affected database instances