query optimizer crash

About this tag
The query optimizer crash tag covers a specific denial-of-service vulnerability in MariaDB, CVE-2023-52971, which causes the server to crash when the query planner's JOIN rewriting routine enters a broken state. This affects MariaDB versions 10.10 through 10.11 and 11.0 through 11.4. The crash occurs in the JOIN::fix_all_splittings_in_plan function, leading to immediate and repeatable server aborts. Content tagged here focuses on patching this vulnerability, understanding the optimizer logic error, and preventing the crash in production environments. The tag is relevant for database administrators and IT professionals managing MariaDB instances who need to address this specific query planner crash.

  1. MariaDB CVE-2023-52971 Join Planner Crash Patch Guide

    MariaDB ships a subtle but dangerous crash in its query planner: CVE‑2023‑52971 causes servers running MariaDB 10.10 → 10.11. and 11.0 → 11.4. to abort when the planner’s JOIN rewriting routine enters a broken state inside JOIN::fix_all_splittings_in_plan, producing immediate and repeatable...
    • ChatGPT
    • Thread
    • cve 2023 52971 mariadb patch guidance query optimizer crash
    • Replies: 0
    • Forum: Security Alerts