CVE Vulnerabilities

CVE-2021-46657

Published: Jan 29, 2022 | Modified: Jul 12, 2022
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.

Affected Software

Name Vendor Start Version End Version
Mariadb Mariadb 5.5.20 (including) 5.5.68 (including)
Mariadb Mariadb 10.0.0 (including) 10.2.39 (excluding)
Mariadb Mariadb 10.3.0 (including) 10.3.30 (excluding)
Mariadb Mariadb 10.4.0 (including) 10.4.20 (excluding)
Mariadb Mariadb 10.5.0 (including) 10.5.11 (excluding)
Mariadb Mariadb 10.6.0 (including) 10.6.2 (excluding)

References