MariaDB through 10.5.9 allows an application crash in subselectpostjoin_aggr for a NULL value of aggr.
{
"versions": [
{
"introduced": "10.2.0"
},
{
"fixed": "10.2.43"
},
{
"introduced": "10.3.0"
},
{
"fixed": "10.3.34"
},
{
"introduced": "10.4.0"
},
{
"fixed": "10.4.24"
},
{
"introduced": "10.5.0"
},
{
"fixed": "10.5.15"
},
{
"introduced": "10.6.0"
},
{
"fixed": "10.6.7"
}
]
}[
{
"events": [
{
"introduced": "10.7.0"
},
{
"fixed": "10.7.3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "34"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "35"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "36"
}
]
}
]
[
{
"id": "CVE-2021-46664-84206f5b",
"signature_type": "Line",
"target": {
"file": "sql/sql_lex.cc"
},
"deprecated": false,
"digest": {
"line_hashes": [
"98111117393566517679651759304023085372",
"304938594711446698139907843226650211733",
"276479549989744167816865099922120078879",
"270219840002247898028875582953023464708"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/mariadb/server/commit/3a52569499e2f0c4d1f25db1e81617a9d9755400"
},
{
"id": "CVE-2021-46664-d4dba36e",
"signature_type": "Function",
"target": {
"file": "sql/sql_lex.cc",
"function": "st_select_lex::optimize_unflattened_subqueries"
},
"deprecated": false,
"digest": {
"function_hash": "165020614219671822891384418769980927498",
"length": 1922.0
},
"signature_version": "v1",
"source": "https://github.com/mariadb/server/commit/3a52569499e2f0c4d1f25db1e81617a9d9755400"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-46664.json"