CVE-2021-46666

Description

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause.

Affected packages (4)

• Bitnami/mariadbfrom 0, < 10.2.39, >= 10.3.0, < 10.3.30, >= 10.4.0, < 10.4.20, >= 10.5.0, < 10.5.11, >= 10.6.0, < 10.6.2
• Bitnami/mariadb-minfrom 0, < 10.2.39, >= 10.3.0, < 10.3.30, >= 10.4.0, < 10.4.20, >= 10.5.0, < 10.5.11, >= 10.6.0, < 10.6.2
• Bitnami/mysql-clientfrom 0, < 10.2.39, >= 10.3.0, < 10.3.30, >= 10.4.0, < 10.4.20, >= 10.5.0, < 10.5.11, >= 10.6.0, < 10.6.2
• Debian/mariadb-10.5from 0, < 1:10.5.11-1

CVSS scores

References (5)

• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2021-46666
• WEBhttps://jira.mariadb.org/browse/MDEV-25635
• WEBhttps://mariadb.com/kb/en/security/
• WEBhttps://nvd.nist.gov/vuln/detail/CVE-2021-46666
• WEBhttps://security.netapp.com/advisory/ntap-20220221-0002/