CVE-2021-46658

Description

save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.

Affected packages (4)

• Bitnami/mariadb>= 10.2.0, < 10.2.40, >= 10.3.0, < 10.3.31, >= 10.4.0, < 10.4.21, >= 10.5.0, < 10.5.12, >= 10.6.0, < 10.6.3
• Bitnami/mariadb-min>= 10.2.0, < 10.2.40, >= 10.3.0, < 10.3.31, >= 10.4.0, < 10.4.21, >= 10.5.0, < 10.5.12, >= 10.6.0, < 10.6.3
• Bitnami/mysql-client>= 10.2.0, < 10.2.40, >= 10.3.0, < 10.3.31, >= 10.4.0, < 10.4.21, >= 10.5.0, < 10.5.12, >= 10.6.0, < 10.6.3
• Debian/mariadb-10.5from 0, < 1:10.5.11-1

CVSS scores

References (5)

• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2021-46658
• WEBhttps://jira.mariadb.org/browse/MDEV-25630
• WEBhttps://mariadb.com/kb/en/security/
• WEBhttps://nvd.nist.gov/vuln/detail/CVE-2021-46658
• WEBhttps://security.netapp.com/advisory/ntap-20220221-0002/