CVE-2021-46668: Medium severity mariadb vulnerability
Published Feb 1, 2022
·Updated
MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.
Affected Software
13 affected componentsFixes available
redhat/mariadb<10.5.15
10.5.15
redhat/mariadb<10.6.7
10.6.7
redhat/mariadb<10.7.3
10.7.3
redhat/mariadb<10.8.2
10.8.2
MariaDB MariaDB>=10.2.0<10.2.43
MariaDB MariaDB>=10.3.0<10.3.34
MariaDB MariaDB>=10.4.0<10.4.24
MariaDB MariaDB>=10.5.0<10.5.15
MariaDB MariaDB>=10.6.0<10.6.7
MariaDB MariaDB>=10.7.0<10.7.3
fedoraproject fedora=34
fedoraproject fedora=35
fedoraproject fedora=36
Remediation
Patch Available
Patch Available
Event History
Feb 1, 2022
CVE Published
via MITRE·01:46 AM
Data Sourced
via MITRE·01:46 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-46668.
2
What is the severity of CVE-2021-46668?
The severity of CVE-2021-46668 is medium (5.5).
3
What is the affected software for CVE-2021-46668?
The affected software for CVE-2021-46668 is MariaDB versions 10.2.0 to 10.7.3, and Fedora versions 34 to 36.
4
How does CVE-2021-46668 impact MariaDB?
CVE-2021-46668 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.
5
Is there a fix available for CVE-2021-46668?
Yes, a fix is available. Upgrade to MariaDB version 10.5.15, 10.6.7, or 10.7.3.