CVE-2021-46663: Medium severity mariadb vulnerability
Published Feb 1, 2022
·Updated
MariaDB through 10.5.13 allows a hamaria::extra application crash via certain SELECT statements.
Affected Software
16 affected componentsFixes available
redhat/mariadb<10.2.43
10.2.43
redhat/mariadb<10.3.34
10.3.34
redhat/mariadb<10.4.24
10.4.24
redhat/mariadb<10.5.15
10.5.15
redhat/mariadb<10.6.7
10.6.7
redhat/mariadb<10.7.3
10.7.3
redhat/mariadb<10.8.2
10.8.2
MariaDB MariaDB>=10.2.41<10.2.43
MariaDB MariaDB>=10.3.32<10.3.34
MariaDB MariaDB>=10.4.22<10.4.24
MariaDB MariaDB>=10.5.9<10.5.15
MariaDB MariaDB>=10.6.0<10.6.7
MariaDB MariaDB>=10.7.0<10.7.3
fedoraproject fedora=34
fedoraproject fedora=35
fedoraproject fedora=36
Remediation
Patch Available
Event History
Feb 1, 2022
CVE Published
via MITRE·01:47 AM
Data Sourced
via MITRE·01:47 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-46663?
CVE-2021-46663 is classified as a vulnerability that could lead to application crashes under specific conditions.
2
How do I fix CVE-2021-46663?
To address CVE-2021-46663, upgrade MariaDB to version 10.2.43, 10.3.34, 10.4.24, 10.5.15, 10.6.7, or 10.7.3.
3
Which versions of MariaDB are affected by CVE-2021-46663?
CVE-2021-46663 affects MariaDB versions up to and including 10.5.13.
4
What could happen if I don't fix CVE-2021-46663?
If CVE-2021-46663 is not fixed, certain SELECT statements may cause the ha_maria application to crash.
5
Is there a specific workaround for CVE-2021-46663?
There is no specific workaround for CVE-2021-46663; updating to a safe version is recommended.