CVE-2021-46662: Medium severity mariadb server vulnerability
Published Feb 1, 2022
·Updated
MariaDB through 10.5.9 allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery.
Affected Software
9 affected componentsFixes available
redhat/mariadb<10.3.32
10.3.32
redhat/mariadb<10.4.22
10.4.22
redhat/mariadb<10.5.13
10.5.13
redhat/mariadb<10.6.5
10.6.5
redhat/mariadb<10.8.1
10.8.1
MariaDB MariaDB>=10.3.0<10.3.32
MariaDB MariaDB>=10.4.0<10.4.22
MariaDB MariaDB>=10.5.0<10.5.13
MariaDB MariaDB>=10.6.0<10.6.5
Remediation
Patch Available
Event History
Feb 1, 2022
CVE Published
via MITRE·01:47 AM
Data Sourced
via MITRE·01:47 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-46662.
2
What is the severity of CVE-2021-46662?
The severity of CVE-2021-46662 is medium.
3
Which versions of MariaDB are affected by CVE-2021-46662?
The versions of MariaDB affected by CVE-2021-46662 are 10.3.0 through 10.3.32, 10.4.0 through 10.4.22, 10.5.0 through 10.5.13, and 10.6.0 through 10.6.5.
4
How can the vulnerability CVE-2021-46662 be exploited?
CVE-2021-46662 can be exploited by certain uses of an UPDATE statement in conjunction with a nested subquery.
5
Is there a fix available for CVE-2021-46662?
Yes, a fix is available for CVE-2021-46662. Users should update their MariaDB installations to versions 10.3.32, 10.4.22, 10.5.13, or 10.6.5.