CVE-2021-46669

Name
CVE-2021-46669
Description
MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.
NVD Severity
medium
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://jira.mariadb.org/browse/MDEV-25638
Third Party Advisory https://security.netapp.com/advisory/ntap-20220221-0002/
Patch https://mariadb.com/kb/en/security/

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* mariadb >= None <= 10.5.9

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
mariadb 3.12-main 10.4.24-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable