PT-2022-4797 · Mariadb+9 · Mariadb+10
Zuming Jiang
·
Published
2021-05-24
·
Updated
2025-06-10
·
CVE-2021-46664
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
MariaDB versions 10.5.9 and earlier
Description
The issue is related to errors in pointer handling, which can cause an application crash when a NULL value is encountered in the
aggr variable within the sub select postjoin aggr function. This can lead to a denial of service. The problem is associated with the sub select postjoin aggr function for a NULL value of aggr.Recommendations
For MariaDB versions 10.5.9 and earlier, consider updating to a version where this issue is resolved, as the current version allows an application crash in
sub select postjoin aggr for a NULL value of aggr.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Mariadb
Mariadb Server
Red Hat
Rocky Linux
Suse
Ubuntu