CVE-2023-52969: 
MariaDB Server vulnerability analysis and mitigation

MariaDB Server versions 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. are affected by a vulnerability identified as CVE-2023-52969. The vulnerability was disclosed on March 8, 2025, and involves a system crash condition that results in an empty backtrace log, potentially related to make_aggr_tables_info and optimize_stage2 functionalities (NVD Database).

The vulnerability has been assigned a CVSS v3.1 base score of 4.9 (Medium) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The vulnerability is classified under CWE-1038 (Insecure Automated Optimizations). The attack vector is network-accessible, requires high privileges, but has low attack complexity and needs no user interaction (NVD Database, Snyk Report).

The primary impact of this vulnerability is on system availability. When successfully exploited, it can cause a complete crash of the MariaDB server instance, resulting in a total loss of availability. The vulnerability does not affect confidentiality or integrity of the system (Snyk Report).

The vulnerability requires high privileges for exploitation, indicating that an attacker would need significant access to the system to trigger the crash condition. The attack can be executed remotely over the network, though the high privilege requirement serves as a limiting factor (NVD Database).