CVE-2021-46657

Description

get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.

Affected packages (4)

• Bitnami/mariadb>= 10.0.0, < 10.2.39, >= 10.3.0, < 10.3.30, >= 10.4.0, < 10.4.20, >= 10.5.0, < 10.5.11, >= 10.6.0, < 10.6.2
• Bitnami/mariadb-min>= 10.0.0, < 10.2.39, >= 10.3.0, < 10.3.30, >= 10.4.0, < 10.4.20, >= 10.5.0, < 10.5.11, >= 10.6.0, < 10.6.2 | >= 5.5.20, <= 5.5.68
• Bitnami/mysql-client>= 10.0.0, < 10.2.39, >= 10.3.0, < 10.3.30, >= 10.4.0, < 10.4.20, >= 10.5.0, < 10.5.11, >= 10.6.0, < 10.6.2
• Debian/mariadb-10.5from 0, < 1:10.5.11-1

CVSS scores

References (5)

• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2021-46657
• WEBhttps://jira.mariadb.org/browse/MDEV-25629
• WEBhttps://mariadb.com/kb/en/security/
• WEBhttps://nvd.nist.gov/vuln/detail/CVE-2021-46657
• WEBhttps://security.netapp.com/advisory/ntap-20220221-0002/