CVE-2021-46666

2022-02-0102:15:07

Google

osv.dev

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

9.5 High

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

27.7%

JSON

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause.

CPENameOperatorVersion
servereqmariadb-galera-10.0.33
servereqmariadb-10.2.29
servereqmariadb-galera-5.5.56
servereqmariadb-10.2.17
servereqmysql-5.5.62
servereqmysql-5.5.56
servereqmariadb-5.5.60
servereqmariadb-10.1.44
servereqmariadb-10.1.41
servereqmariadb-10.3.0

Name	Operator	Version
server	eq	mariadb-galera-10.0.33
server	eq	mariadb-10.2.29
server	eq	mariadb-galera-5.5.56
server	eq	mariadb-10.2.17
server	eq	mysql-5.5.62
server	eq	mysql-5.5.56
server	eq	mariadb-5.5.60
server	eq	mariadb-10.1.44
server	eq	mariadb-10.1.41
server	eq	mariadb-10.3.0