PT-2021-24338 · Mariadb+7 · Mariadb+8
Zuming Jiang
·
Published
2021-08-06
·
Updated
2025-06-10
·
CVE-2021-46658
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
MariaDB versions prior to 10.6.3
Description:
The issue arises from the incorrect handling of
with window func=true for a subquery in the save window function values function, leading to an application crash.Recommendations:
For MariaDB versions prior to 10.6.3, update to version 10.6.3 or later to resolve the issue.
As a temporary workaround, consider avoiding the use of
with window func=true for subqueries in the save window function values function until a patch is available.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Mariadb
Mariadb Server
Red Hat
Rocky Linux
Suse