CVE-2021-46665: Medium severity mariadb vulnerability
Published Feb 1, 2022
·Updated
MariaDB through 10.5.9 allows a sqlparse.cc application crash because of incorrect usedtables expectations.
Affected Software
16 affected componentsFixes available
redhat/mariadb<10.2.43
10.2.43
redhat/mariadb<10.3.34
10.3.34
redhat/mariadb<10.4.24
10.4.24
redhat/mariadb<10.5.15
10.5.15
redhat/mariadb<10.6.7
10.6.7
redhat/mariadb<10.7.3
10.7.3
redhat/mariadb<10.8.2
10.8.2
MariaDB MariaDB>=10.2.0<10.2.43
MariaDB MariaDB>=10.3.0<10.3.34
MariaDB MariaDB>=10.4.0<10.4.24
MariaDB MariaDB>=10.5.0<10.5.15
MariaDB MariaDB>=10.6.0<10.6.7
MariaDB MariaDB>=10.7.0<10.7.3
fedoraproject fedora=34
fedoraproject fedora=35
fedoraproject fedora=36
Remediation
Patch Available
Event History
Feb 1, 2022
CVE Published
via MITRE·01:47 AM
Data Sourced
via MITRE·01:47 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-46665?
CVE-2021-46665 is classified as a medium severity vulnerability that can lead to application crashes.
2
How do I fix CVE-2021-46665?
To fix CVE-2021-46665, upgrade to MariaDB version 10.5.15 or later.
3
Which versions of MariaDB are affected by CVE-2021-46665?
CVE-2021-46665 affects MariaDB versions prior to 10.5.15, including 10.2.43, 10.3.34, and 10.4.24.
4
What type of vulnerability is CVE-2021-46665?
CVE-2021-46665 is a denial of service vulnerability due to application crashes from incorrect used_tables expectations.
5
Are there any specific distributions affected by CVE-2021-46665?
Yes, specific Fedora releases, including Fedora 34, 35, and 36, may be affected by CVE-2021-46665.