CVE-2021-46661: Medium severity mariadb vulnerability
Published Feb 1, 2022
·Updated
MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist via an unused common table expression (CTE).
Affected Software
16 affected componentsFixes available
redhat/mariadb<10.2.43
10.2.43
redhat/mariadb<10.3.34
10.3.34
redhat/mariadb<10.4.24
10.4.24
redhat/mariadb<10.5.15
10.5.15
redhat/mariadb<10.6.7
10.6.7
redhat/mariadb<10.7.3
10.7.3
redhat/mariadb<10.8.2
10.8.2
MariaDB MariaDB>=10.2.0<10.2.43
MariaDB MariaDB>=10.3.0<10.3.34
MariaDB MariaDB>=10.4.0<10.4.24
MariaDB MariaDB>=10.5.0<10.5.15
MariaDB MariaDB>=10.6.0<10.6.7
MariaDB MariaDB>=10.7.0<10.7.3
fedoraproject fedora=34
fedoraproject fedora=35
fedoraproject fedora=36
Remediation
Patch Available
Event History
Feb 1, 2022
CVE Published
via MITRE·01:48 AM
Data Sourced
via MITRE·01:48 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-46661?
CVE-2021-46661 is classified as a medium severity vulnerability due to its potential to cause application crashes.
2
How do I fix CVE-2021-46661?
To fix CVE-2021-46661, upgrade to MariaDB versions 10.5.15, 10.6.7, 10.7.3, or later.
3
Which versions of MariaDB are affected by CVE-2021-46661?
CVE-2021-46661 affects MariaDB versions 10.2.0 through 10.5.9.
4
What impact does CVE-2021-46661 have on my application?
CVE-2021-46661 can cause application crashes by mishandling unused common table expressions.
5
Is there a specific fix for the crashing issue in CVE-2021-46661?
Yes, the specific fix for the crashing issue in CVE-2021-46661 is included in the updated versions of MariaDB mentioned earlier.