Home

CVE-2021-46666

Description

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.063

Associated Vulnerability

VulnerabilityOS Platform
Vulnerability CVE-2021-46657,CVE-2021-46666 are affected in MariaDB 10.6.1Windows
(RHSA-2022:1556) mariadb:10.3 security and bug fix update galera-25.3.34-4.module+el8.5.0+14124+14ced695.x86_64.rpmLinux
(RHSA-2022:1556) mariadb:10.3 security and bug fix update galera-debugsource-25.3.34-4.module+el8.5.0+14124+14ced695.x86_64.rpmLinux
Judy update (ELSA-2022-1556) Judy-1.0.5-18.0.1.module+el8.3.0+9616+7a81225f.x86_64.rpmLinux
Galera update (ELSA-2022-1556) galera-25.3.34-4.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb update (ELSA-2022-1556) mariadb-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-backup update (ELSA-2022-1556) mariadb-backup-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-common update (ELSA-2022-1556) mariadb-common-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-devel update (ELSA-2022-1556) mariadb-devel-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-embedded update (ELSA-2022-1556) mariadb-embedded-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-embedded-devel update (ELSA-2022-1556) mariadb-embedded-devel-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-errmsg update (ELSA-2022-1556) mariadb-errmsg-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-gssapi-server update (ELSA-2022-1556) mariadb-gssapi-server-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-oqgraph-engine update (ELSA-2022-1556) mariadb-oqgraph-engine-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-server update (ELSA-2022-1556) mariadb-server-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-server-galera update (ELSA-2022-1556) mariadb-server-galera-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-server-utils update (ELSA-2022-1556) mariadb-server-utils-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-test update (ELSA-2022-1556) mariadb-test-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.x86_64.rpmLinux
Judy update (ELSA-2022-1557) Judy-1.0.5-18.module+el8.4.0+20040+caf70fad.x86_64.rpmLinux
Galera update (ELSA-2022-1557) galera-26.4.9-4.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb update (ELSA-2022-1557) mariadb-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-backup update (ELSA-2022-1557) mariadb-backup-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-common update (ELSA-2022-1557) mariadb-common-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-devel update (ELSA-2022-1557) mariadb-devel-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-embedded update (ELSA-2022-1557) mariadb-embedded-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-embedded-devel update (ELSA-2022-1557) mariadb-embedded-devel-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-errmsg update (ELSA-2022-1557) mariadb-errmsg-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-gssapi-server update (ELSA-2022-1557) mariadb-gssapi-server-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-oqgraph-engine update (ELSA-2022-1557) mariadb-oqgraph-engine-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-pam update (ELSA-2022-1557) mariadb-pam-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-server update (ELSA-2022-1557) mariadb-server-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-server-galera update (ELSA-2022-1557) mariadb-server-galera-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-server-utils update (ELSA-2022-1557) mariadb-server-utils-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-test update (ELSA-2022-1557) mariadb-test-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update Judy-debugsource-1.0.5-18.module+el8.4.0+9031+9abc7af9.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update galera-debugsource-26.4.9-4.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-backup-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-debugsource-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-embedded-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-embedded-devel-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-errmsg-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-gssapi-server-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-oqgraph-engine-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-pam-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-server-galera-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-server-utils-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-test-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
Vulnerability CVE-2021-46657,CVE-2021-46666 are affected in MariaDB 10.6.1 (For Linux)Linux
mariadb Security Update (ALAS-2023-2057) mariadb-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-libs-5.5.68-1.amzn2.0.1.i686.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-libs-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-test-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-bench-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-devel-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-server-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-embedded-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-embedded-devel-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-bench-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-devel-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-embedded-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-embedded-devel-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-libs-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-libs-5.5.68-1.amzn2.0.1.i686.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-server-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-test-5.5.68-1.amzn2.0.1.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234