CVE Vulnerabilities

CVE-2021-46662

Published: Feb 01, 2022 | Modified: Apr 13, 2022
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery.

Affected Software

Name Vendor Start Version End Version
Mariadb Mariadb 10.3.0 (including) 10.3.32 (excluding)
Mariadb Mariadb 10.4.0 (including) 10.4.22 (excluding)
Mariadb Mariadb 10.5.0 (including) 10.5.13 (excluding)
Mariadb Mariadb 10.6.0 (including) 10.6.5 (excluding)

References