GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
oesa-2022-1587
Vulnerability from osv_openeuler
Published
2022-03-19 11:04
Modified
2026-08-06 11:04
Summary
mariadb security update
Details

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

MariaDB turns data into structured information in a wide array of applications, ranging from banking to websites. It is an enhanced, drop-in replacement for MySQL. MariaDB is used because it is fast, scalable and robust, with a rich ecosystem of storage engines, plugins and many other tools make it very versatile for a wide variety of use cases.

Security Fix(es):

MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.(CVE-2021-46669)

MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE).(CVE-2021-46661)

MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.(CVE-2021-46667)

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause.(CVE-2021-46666)

MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery.(CVE-2021-46662)

MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.(CVE-2021-46663)

MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations.(CVE-2021-46665)

MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.(CVE-2021-46664)

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.(CVE-2021-46659)

get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.(CVE-2021-46657)

Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
To clipboard 

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "mariadb-embedded-devel-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-oqgraph-engine-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-cracklib-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-backup-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-debugsource-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-common-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-server-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-debuginfo-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-server-galera-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-gssapi-server-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-errmessage-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-test-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-embedded-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-devel-10.3.34-1.oe1.aarch64.rpm"
        ],
        "src": [
          "mariadb-10.3.34-1.oe1.src.rpm"
        ],
        "x86_64": [
          "mariadb-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-backup-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-test-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-gssapi-server-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-cracklib-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-debuginfo-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-embedded-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-errmessage-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-debugsource-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-server-galera-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-devel-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-embedded-devel-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-common-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-server-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-oqgraph-engine-10.3.34-1.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP1",
        "name": "mariadb",
        "purl": "pkg:rpm/openEuler/mariadb\u0026distro=openEuler-20.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.3.34-1.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "mariadb-debuginfo-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-common-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-errmessage-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-debugsource-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-backup-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-embedded-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-test-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-server-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-oqgraph-engine-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-server-galera-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-embedded-devel-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-devel-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-gssapi-server-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-cracklib-10.3.34-1.oe1.aarch64.rpm"
        ],
        "src": [
          "mariadb-10.3.34-1.oe1.src.rpm"
        ],
        "x86_64": [
          "mariadb-errmessage-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-cracklib-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-devel-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-common-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-test-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-oqgraph-engine-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-debugsource-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-server-galera-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-embedded-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-gssapi-server-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-debuginfo-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-embedded-devel-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-server-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-backup-10.3.34-1.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP2",
        "name": "mariadb",
        "purl": "pkg:rpm/openEuler/mariadb\u0026distro=openEuler-20.03-LTS-SP2"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.3.34-1.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "mariadb-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-cracklib-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-common-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-embedded-devel-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-test-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-server-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-devel-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-server-galera-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-embedded-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-backup-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-gssapi-server-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-errmessage-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-debugsource-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-debuginfo-10.3.34-1.oe1.aarch64.rpm",
          "mariadb-oqgraph-engine-10.3.34-1.oe1.aarch64.rpm"
        ],
        "src": [
          "mariadb-10.3.34-1.oe1.src.rpm"
        ],
        "x86_64": [
          "mariadb-gssapi-server-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-common-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-backup-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-debugsource-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-debuginfo-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-devel-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-errmessage-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-embedded-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-oqgraph-engine-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-embedded-devel-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-cracklib-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-server-galera-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-server-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-test-10.3.34-1.oe1.x86_64.rpm",
          "mariadb-10.3.34-1.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP3",
        "name": "mariadb",
        "purl": "pkg:rpm/openEuler/mariadb\u0026distro=openEuler-20.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.3.34-1.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "mariadb-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-config-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-common-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-embedded-devel-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-test-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-server-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-devel-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-server-galera-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-embedded-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-backup-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-gssapi-server-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-errmsg-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-debugsource-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-debuginfo-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-oqgraph-engine-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-pam-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-rocksdb-engine-10.5.15-2.oe2203.aarch64.rpm",
          "mariadb-server-uitls-10.5.15-2.oe2203.aarch64.rpm"
        ],
        "src": [
          "mariadb-10.5.15-2.oe2203.src.rpm"
        ],
        "x86_64": [
          "mariadb-gssapi-server-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-common-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-backup-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-debugsource-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-debuginfo-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-devel-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-errmsg-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-embedded-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-oqgraph-engine-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-embedded-devel-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-config-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-server-galera-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-server-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-test-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-pam-10.5.15-2.oe1.x86_64.rpm",
          "mariadb-server-utils-10.5.15-2.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS",
        "name": "mariadb",
        "purl": "pkg:rpm/openEuler/mariadb\u0026distro=openEuler-22.03-LTS"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.5.15-2.oe2203"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.\r\n\r\nMariaDB turns data into structured information in a wide array of applications, ranging from banking to websites. It is an enhanced, drop-in replacement for MySQL. MariaDB is used because it is fast, scalable and robust, with a rich ecosystem of storage engines, plugins and many other tools make it very versatile for a wide variety of use cases.\r\n\r\nSecurity Fix(es):\r\n\r\nMariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.(CVE-2021-46669)\r\n\r\nMariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE).(CVE-2021-46661)\r\n\r\nMariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.(CVE-2021-46667)\r\n\r\nMariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause.(CVE-2021-46666)\r\n\r\nMariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery.(CVE-2021-46662)\r\n\r\nMariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.(CVE-2021-46663)\r\n\r\nMariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations.(CVE-2021-46665)\r\n\r\nMariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.(CVE-2021-46664)\r\n\r\nMariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.(CVE-2021-46659)\r\n\r\nget_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.(CVE-2021-46657)",
  "id": "OESA-2022-1587",
  "modified": "2026-08-06T11:04:52Z",
  "published": "2022-03-19T11:04:52Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1587"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-46669"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-46661"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-46667"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-46666"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-46662"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-46663"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-46665"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-46664"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-46659"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-46657"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "mariadb security update",
  "upstream": [
    "CVE-2021-46669",
    "CVE-2021-46661",
    "CVE-2021-46667",
    "CVE-2021-46666",
    "CVE-2021-46662",
    "CVE-2021-46663",
    "CVE-2021-46665",
    "CVE-2021-46664",
    "CVE-2021-46659",
    "CVE-2021-46657"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.