Vulnerability CVE-2021-46658: Information

Description

save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2021-46658
Published: Jan. 30, 2022
Modified: July 12, 2022

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
mariadbsisyphus10.6.8-alt110.11.8-alt1ALT-PU-2022-2360-1304958Fixed
mariadbsisyphus_e2k10.6.9-alt1.110.11.8-alt1ALT-PU-2022-5935-1-Fixed
mariadbsisyphus_riscv6410.6.8-alt110.11.8-alt1ALT-PU-2022-5713-1-Fixed
mariadbp1010.6.9-alt110.6.18-alt1ALT-PU-2022-2446-1304969Fixed
mariadbp10_e2k10.6.9-alt1.110.6.18-alt1ALT-PU-2022-5903-1-Fixed
mariadbp910.4.31-alt0.M90P.110.4.34-alt0.M90P.1ALT-PU-2023-6462-3332127Fixed
mariadbc10f110.6.9-alt110.6.18-alt1ALT-PU-2022-2446-1304969Fixed
mariadbc9f210.6.9-alt110.6.18-alt1ALT-PU-2023-1583-1317769Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://jira.mariadb.org/browse/MDEV-25630
  • Exploit
  • Issue Tracking
  • Patch
  • Vendor Advisory
https://security.netapp.com/advisory/ntap-20220221-0002/
  • Third Party Advisory
https://mariadb.com/kb/en/security/
  • Patch
  • Vendor Advisory

    1. Configuration 1

      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.2.0
      End excliding
      10.2.40
      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.3.0
      End excliding
      10.3.31
      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.4.0
      End excliding
      10.4.21
      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.5.0
      End excliding
      10.5.12
      cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
      Start including
      10.6.0
      End excliding
      10.6.3
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.1
Back to top