CVE-2021-46667

Description

MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.036

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2022-31624,CVE-2022-27385,CVE-2021-46667,CVE-2021-46662 are fixed in MariaDB MariaDB 10.6.5Windows
Vulnerabilities CVE-2022-31624,CVE-2022-27385,CVE-2021-46667,CVE-2021-46662,CVE-2021-35604 are fixed in MariaDB MariaDB 10.5.13Windows
Vulnerabilities CVE-2022-31624,CVE-2022-27385,CVE-2021-46667,CVE-2021-46662,CVE-2021-35604 are fixed in MariaDB MariaDB 10.4.22Windows
Vulnerabilities CVE-2022-31624,CVE-2022-27385,CVE-2021-46667,CVE-2021-46662,CVE-2021-35604 are fixed in MariaDB MariaDB 10.3.32Windows
Vulnerabilities CVE-2022-31624,CVE-2021-46667,CVE-2021-35604 are fixed in MariaDB MariaDB 10.2.41Windows
(RHSA-2022:1556) mariadb:10.3 security and bug fix update galera-25.3.34-4.module+el8.5.0+14124+14ced695.x86_64.rpmLinux
(RHSA-2022:1556) mariadb:10.3 security and bug fix update galera-debugsource-25.3.34-4.module+el8.5.0+14124+14ced695.x86_64.rpmLinux
Judy update (ELSA-2022-1556) Judy-1.0.5-18.0.1.module+el8.3.0+9616+7a81225f.x86_64.rpmLinux
Galera update (ELSA-2022-1556) galera-25.3.34-4.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb update (ELSA-2022-1556) mariadb-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-backup update (ELSA-2022-1556) mariadb-backup-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-common update (ELSA-2022-1556) mariadb-common-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-devel update (ELSA-2022-1556) mariadb-devel-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-embedded update (ELSA-2022-1556) mariadb-embedded-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-embedded-devel update (ELSA-2022-1556) mariadb-embedded-devel-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-errmsg update (ELSA-2022-1556) mariadb-errmsg-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-gssapi-server update (ELSA-2022-1556) mariadb-gssapi-server-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-oqgraph-engine update (ELSA-2022-1556) mariadb-oqgraph-engine-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-server update (ELSA-2022-1556) mariadb-server-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-server-galera update (ELSA-2022-1556) mariadb-server-galera-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-server-utils update (ELSA-2022-1556) mariadb-server-utils-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
Mariadb-test update (ELSA-2022-1556) mariadb-test-10.3.32-2.0.1.module+el8.5.0+20629+e1b20d6b.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.x86_64.rpmLinux
Judy update (ELSA-2022-1557) Judy-1.0.5-18.module+el8.4.0+20040+caf70fad.x86_64.rpmLinux
Galera update (ELSA-2022-1557) galera-26.4.9-4.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb update (ELSA-2022-1557) mariadb-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-backup update (ELSA-2022-1557) mariadb-backup-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-common update (ELSA-2022-1557) mariadb-common-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-devel update (ELSA-2022-1557) mariadb-devel-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-embedded update (ELSA-2022-1557) mariadb-embedded-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-embedded-devel update (ELSA-2022-1557) mariadb-embedded-devel-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-errmsg update (ELSA-2022-1557) mariadb-errmsg-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-gssapi-server update (ELSA-2022-1557) mariadb-gssapi-server-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-oqgraph-engine update (ELSA-2022-1557) mariadb-oqgraph-engine-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-pam update (ELSA-2022-1557) mariadb-pam-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-server update (ELSA-2022-1557) mariadb-server-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-server-galera update (ELSA-2022-1557) mariadb-server-galera-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-server-utils update (ELSA-2022-1557) mariadb-server-utils-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
Mariadb-test update (ELSA-2022-1557) mariadb-test-10.5.13-1.module+el8.5.0+20630+d7805586.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update Judy-debugsource-1.0.5-18.module+el8.4.0+9031+9abc7af9.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update galera-debugsource-26.4.9-4.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-backup-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-debugsource-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-embedded-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-embedded-devel-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-errmsg-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-gssapi-server-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-oqgraph-engine-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-pam-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-server-galera-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-server-utils-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
(RHSA-2022:1557) mariadb:10.5 security, bug fix, and enhancement update mariadb-test-10.5.13-1.module+el8.5.0+14125+d11efe18.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-libs-5.5.68-1.amzn2.0.1.i686.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-libs-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-test-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-bench-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-devel-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-server-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-embedded-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS-2023-2057) mariadb-embedded-devel-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-bench-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-devel-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-embedded-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-embedded-devel-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-libs-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-libs-5.5.68-1.amzn2.0.1.i686.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-server-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb Security Update (ALAS2-2023-2057) mariadb-test-5.5.68-1.amzn2.0.1.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-backup-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-common-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-connect-engine-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-cracklib-password-check-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-devel-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-errmsg-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-gssapi-server-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-oqgraph-engine-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-pam-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-rocksdb-engine-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-server-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-server-utils-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-sphinx-engine-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux
mariadb105 Security Update (ALAS2023-2023-037) mariadb105-test-10.5.16-1.amzn2023.0.7.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234