CVE-2021-46658

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-46658
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-46658.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-46658
Aliases
Downstream
Related
Published
2022-01-29T23:15:07.417Z
Modified
2026-04-12T05:16:01.393594Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

savewindowfunctionvalues in MariaDB before 10.6.3 allows an application crash because of incorrect handling of withwindow_func=true for a subquery.

References

Affected packages

Git / github.com/mariadb/server

Affected ranges

Type
GIT
Repo
https://github.com/mariadb/server
Events
Introduced
9664240c948a92c22ccda0e1f5a420eb776ddcb1
Fixed
b549af69137023ce0f93d312a10d61e467dca07f
Introduced
20ae591abd0bfe1bfaee546989ee163f4ef832b1
Fixed
7f264997dd21c5126350a9a5f0cc0960afdd1229
Introduced
c761b43451d54eeeecdf3c102906fcce88d4e9d9
Fixed
4902b0fdc91cc6dc169dd2322daf966a2eeafdd8
Introduced
7c7f9bef28aa566557da31402142f6dd8298ddd2
Fixed
b5569b62408375f35e2fe851158a7ff17e378ed1
Introduced
1a647b700f6b72dc97211510a5d0c647d5d3d911
Fixed
1f2ccc6db8a3e9be21d7ae599177380e2120d4af
Database specific 
{
    "cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "10.2.0"
        },
        {
            "fixed": "10.2.40"
        },
        {
            "introduced": "10.3.0"
        },
        {
            "fixed": "10.3.31"
        },
        {
            "introduced": "10.4.0"
        },
        {
            "fixed": "10.4.21"
        },
        {
            "introduced": "10.5.0"
        },
        {
            "fixed": "10.5.12"
        },
        {
            "introduced": "10.6.0"
        },
        {
            "fixed": "10.6.3"
        }
    ]
}

Affected versions

mariadb-10.*
mariadb-10.2.0
mariadb-10.2.1
mariadb-10.2.10
mariadb-10.2.11
mariadb-10.2.12
mariadb-10.2.13
mariadb-10.2.14
mariadb-10.2.15
mariadb-10.2.16
mariadb-10.2.18
mariadb-10.2.19
mariadb-10.2.2
mariadb-10.2.20
mariadb-10.2.21
mariadb-10.2.22
mariadb-10.2.23
mariadb-10.2.24
mariadb-10.2.25
mariadb-10.2.26
mariadb-10.2.27
mariadb-10.2.28
mariadb-10.2.29
mariadb-10.2.30
mariadb-10.2.31
mariadb-10.2.39
mariadb-10.2.5
mariadb-10.3.0
mariadb-10.3.1
mariadb-10.3.10
mariadb-10.3.12
mariadb-10.3.16
mariadb-10.3.17
mariadb-10.3.18
mariadb-10.3.19
mariadb-10.3.2
mariadb-10.3.20
mariadb-10.3.21
mariadb-10.3.26
mariadb-10.3.30
mariadb-10.3.4
mariadb-10.3.5
mariadb-10.3.6
mariadb-10.3.7
mariadb-10.4.10
mariadb-10.4.11
mariadb-10.4.20
mariadb-10.4.3
mariadb-10.4.4
mariadb-10.4.5
mariadb-10.4.7
mariadb-10.4.9
mariadb-10.5.0
mariadb-10.5.11
mariadb-10.5.2
mariadb-10.5.4
mariadb-10.6.0
mariadb-10.6.1
mariadb-10.6.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-46658.json"
vanir_signatures_modified 
"2026-04-12T05:16:01Z"
vanir_signatures 
[
    {
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "258070912520669712261283939767978553199",
                "163415287272954152502666917123938658776",
                "49296846038456833842383783174009140961",
                "334843214020125332543169226985653591801"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "sql/table.cc"
        },
        "source": "https://github.com/mariadb/server/commit/b549af69137023ce0f93d312a10d61e467dca07f",
        "signature_version": "v1",
        "id": "CVE-2021-46658-7d8e5b6a"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "74524028531176476080637569635616917678",
            "length": 10035.0
        },
        "target": {
            "file": "sql/table.cc",
            "function": "open_table_from_share"
        },
        "source": "https://github.com/mariadb/server/commit/b549af69137023ce0f93d312a10d61e467dca07f",
        "signature_version": "v1",
        "id": "CVE-2021-46658-b6cfa102"
    }
]