CVE-2021-46659
Summary
| CVE | CVE-2021-46659 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-01-29 23:15:00 UTC |
| Updated | 2023-11-07 03:40:00 UTC |
| Description | MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Fedoraproject | Fedora | 34 | All | All | All |
| Operating System | Fedoraproject | Fedora | 35 | All | All | All |
| Operating System | Fedoraproject | Fedora | 36 | All | All | All |
| Application | Mariadb | Mariadb | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [SECURITY] Fedora 34 Update: mariadb-10.5.15-1.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| CVE-2021-46659 MariaDB Vulnerability in NetApp Products | NetApp Product Security | CONFIRM | security.netapp.com | |
| [SECURITY] Fedora 35 Update: mariadb-10.5.15-1.fc35 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 36 Update: galera-26.4.11-1.fc36 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| Security Vulnerabilities Fixed in MariaDB - MariaDB Knowledge Base | CONFIRM | mariadb.com | |
| [SECURITY] Fedora 34 Update: mariadb-10.5.15-1.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 35 Update: mariadb-10.5.15-1.fc35 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 36 Update: galera-26.4.11-1.fc36 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [MDEV-25631] Crash executing query with VIEW, aggregate and subquery - Jira | MISC | jira.mariadb.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160019 Oracle Enterprise Linux Security Update for mariadb:10.5 (ELSA-2022-5826)
- 160037 Oracle Enterprise Linux Security Update for galera, mariadb, and mysql-selinux (ELSA-2022-5948)
- 160096 Oracle Enterprise Linux Security Update for mariadb:10.3 (ELSA-2022-6443)
- 180479 Debian Security Update for mariadb-10.3mariadb-10.5 (CVE-2021-46659)
- 198679 Ubuntu Security Notification for MariaDB Vulnerabilities (USN-5305-1)
- 240565 Red Hat Update for rh-mariadb105-galera and rh-mariadb105-mariadb (RHSA-2022:5759)
- 240586 Red Hat Update for mariadb:10.5 security (RHSA-2022:5826)
- 240596 Red Hat Update for galera, mariadb, and mysql-selinux security (RHSA-2022:5948)
- 240645 Red Hat Update for rh-mariadb103-galera and rh-mariadb103-mariadb (RHSA-2022:6306)
- 240665 Red Hat Update for mariadb:10.3 (RHSA-2022:6443)
- 282654 Fedora Security Update for galera (FEDORA-2022-03350936ee)
- 282655 Fedora Security Update for mariadb (FEDORA-2022-5cfe372ab7)
- 282722 Fedora Security Update for galera (FEDORA-2022-263f7cc483)
- 354437 Amazon Linux Security Advisory for mariadb105 : ALAS2022-2022-069
- 354476 Amazon Linux Security Advisory for mariadb105 : ALAS2022-2022-182
- 355152 Amazon Linux Security Advisory for mariadb105 : ALAS2023-2023-037
- 355322 Amazon Linux Security Advisory for mariadb : ALAS2-2023-2057
- 356265 Amazon Linux Security Advisory for mariadb : ALASMARIADB10.5-2023-003
- 377368 Alibaba Cloud Linux Security Update for mariadb:10.5 (ALINUX3-SA-2022:0151)
- 500389 Alpine Linux Security Update for mariadb
- 501433 Alpine Linux Security Update for mariadb
- 501971 Alpine Linux Security Update for mariadb
- 502457 Alpine Linux Security Update for mariadb
- 504147 Alpine Linux Security Update for mariadb
- 671866 EulerOS Security Update for mariadb (EulerOS-SA-2022-1939)
- 690789 Free Berkeley Software Distribution (FreeBSD) Security Update for mariadb (ff5606f7-8a45-11ec-8be6-d4c9ef517024)
- 751802 SUSE Enterprise Linux Security Update for mariadb (SUSE-SU-2022:0726-1)
- 751805 SUSE Enterprise Linux Security Update for mariadb (SUSE-SU-2022:0725-1)
- 751808 OpenSUSE Security Update for mariadb (openSUSE-SU-2022:0731-1)
- 751811 OpenSUSE Security Update for mariadb (openSUSE-SU-2022:0725-1)
- 751812 OpenSUSE Security Update for mariadb (openSUSE-SU-2022:0726-1)
- 751841 SUSE Enterprise Linux Security Update for mariadb (SUSE-SU-2022:0782-1)
- 753158 SUSE Enterprise Linux Security Update for mariadb (SUSE-SU-2022:0731-1)
- 753364 SUSE Enterprise Linux Security Update for mariadb (SUSE-SU-2022:2561-1)
- 900644 Common Base Linux Mariner (CBL-Mariner) Security Update for mariadb (8435)
- 900993 Common Base Linux Mariner (CBL-Mariner) Security Update for mariadb (8454-1)
- 940606 AlmaLinux Security Update for mariadb:10.5 (ALSA-2022:5826)
- 940632 AlmaLinux Security Update for galera, (ALSA-2022:5948)
- 940668 AlmaLinux Security Update for mariadb:10.3 (ALSA-2022:6443)
- 960383 Rocky Linux Security Update for mariadb:10.5 (RLSA-2022:5826)
- 960482 Rocky Linux Security Update for galera, (RLSA-2022:5948)