MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.
{
"versions": [
{
"introduced": "10.2.41"
},
{
"fixed": "10.2.43"
},
{
"introduced": "10.3.32"
},
{
"fixed": "10.3.34"
},
{
"introduced": "10.4.22"
},
{
"fixed": "10.4.24"
},
{
"introduced": "10.5.9"
},
{
"fixed": "10.5.15"
},
{
"introduced": "10.6.0"
},
{
"fixed": "10.6.7"
}
]
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-46663.json"
[
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"98111117393566517679651759304023085372",
"304938594711446698139907843226650211733",
"276479549989744167816865099922120078879",
"270219840002247898028875582953023464708"
]
},
"source": "https://github.com/mariadb/server/commit/3a52569499e2f0c4d1f25db1e81617a9d9755400",
"signature_type": "Line",
"id": "CVE-2021-46663-84206f5b",
"target": {
"file": "sql/sql_lex.cc"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "165020614219671822891384418769980927498",
"length": 1922.0
},
"source": "https://github.com/mariadb/server/commit/3a52569499e2f0c4d1f25db1e81617a9d9755400",
"signature_type": "Function",
"id": "CVE-2021-46663-d4dba36e",
"target": {
"file": "sql/sql_lex.cc",
"function": "st_select_lex::optimize_unflattened_subqueries"
}
}
]
[
{
"events": [
{
"introduced": "10.7.0"
},
{
"fixed": "10.7.3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "34"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "35"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "36"
}
]
}
]