CVE-2021-46664: Null Pointer Dereference
First published: Tue Feb 01 2022(Updated: )
MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/mariadb | <10.2.43 | 10.2.43 |
| redhat/mariadb | <10.3.34 | 10.3.34 |
| redhat/mariadb | <10.4.24 | 10.4.24 |
| redhat/mariadb | <10.5.15 | 10.5.15 |
| redhat/mariadb | <10.6.7 | 10.6.7 |
| redhat/mariadb | <10.7.3 | 10.7.3 |
| redhat/mariadb | <10.8.2 | 10.8.2 |
| MariaDB Server | >=10.2.0<10.2.43 | |
| MariaDB Server | >=10.3.0<10.3.34 | |
| MariaDB Server | >=10.4.0<10.4.24 | |
| MariaDB Server | >=10.5.0<10.5.15 | |
| MariaDB Server | >=10.6.0<10.6.7 | |
| MariaDB Server | >=10.7.0<10.7.3 | |
| Fedora | =34 | |
| Fedora | =35 | |
| Fedora | =36 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://jira.mariadb.org/browse/MDEV-25761
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/
- https://mariadb.com/kb/en/security/
- https://security.netapp.com/advisory/ntap-20220221-0002/
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2055755
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2055756
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2055757
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2055758
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2055759
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2055760
- https://github.com/MariaDB/server/commit/3a52569499e2f0c4d1f25db1e81617a9d9755400
- https://access.redhat.com/errata/RHSA-2022:5759
- https://access.redhat.com/errata/RHSA-2022:5826
- https://access.redhat.com/errata/RHSA-2022:5948
- https://access.redhat.com/errata/RHSA-2022:6306
- https://access.redhat.com/errata/RHSA-2022:6443
- https://access.redhat.com/security/cve/cve-2021-46664
- https://bugzilla.redhat.com/show_bug.cgi?id=2050024
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/
Frequently Asked Questions
What is the severity of CVE-2021-46664?
The severity of CVE-2021-46664 is classified as a medium risk due to its potential to cause application crashes.
How do I fix CVE-2021-46664?
To fix CVE-2021-46664, upgrade to MariaDB versions 10.2.43, 10.3.34, 10.4.24, 10.5.15, 10.6.7, 10.7.3, or newer.
Which versions of MariaDB are affected by CVE-2021-46664?
CVE-2021-46664 affects MariaDB versions prior to 10.5.10 and includes versions 10.2.x up to 10.2.43, 10.3.x up to 10.3.34, 10.4.x up to 10.4.24, and 10.5.x up to 10.5.9.
What exploit does CVE-2021-46664 represent?
CVE-2021-46664 represents an application crash exploit that occurs in the sub_select_postjoin_aggr function when a NULL value of aggr is encountered.
Is there a workaround for CVE-2021-46664?
A viable workaround for CVE-2021-46664 is to avoid sending NULL values in the aggregate function aggr for affected MariaDB versions.
- agent/type
- agent/remedy
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-46664
- agent/software-canonical-lookup
- agent/author
- agent/severity
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- package-manager/redhat
- vendor/mariadb
- canonical/mariadb server
- version/mariadb server/10.2.0
- version/mariadb server/10.3.0
- version/mariadb server/10.4.0
- version/mariadb server/10.5.0
- version/mariadb server/10.6.0
- version/mariadb server/10.7.0
- vendor/fedoraproject
- canonical/fedora
- version/fedora/34
- version/fedora/35
- version/fedora/36