CVE-2021-46657

MEDIUM5.5EPSS 0.07%
發布日:2022/1/29修改日:2026/4/28

描述

get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.

受影響套件(4)

  • Bitnami/mariadb>= 10.0.0, < 10.2.39, >= 10.3.0, < 10.3.30, >= 10.4.0, < 10.4.20, >= 10.5.0, < 10.5.11, >= 10.6.0, < 10.6.2
  • Bitnami/mariadb-min>= 10.0.0, < 10.2.39, >= 10.3.0, < 10.3.30, >= 10.4.0, < 10.4.20, >= 10.5.0, < 10.5.11, >= 10.6.0, < 10.6.2 | >= 5.5.20, <= 5.5.68
  • Bitnami/mysql-client>= 10.0.0, < 10.2.39, >= 10.3.0, < 10.3.30, >= 10.4.0, < 10.4.20, >= 10.5.0, < 10.5.11, >= 10.6.0, < 10.6.2
  • Debian/mariadb-10.5from 0, < 1:10.5.11-1

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1MEDIUM5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

參考連結(5)