PT-2021-24337 · Mariadb+7 · Mariadb+8

Zuming Jiang · Published 2021-06-23 · Updated 2025-06-10 · CVE-2021-46657

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: MariaDB versions prior to 10.6.2

Description: The issue allows an application crash via certain subquery uses of ORDER BY. This is related to the get sort by table function in MariaDB.

Recommendations: For MariaDB versions prior to 10.6.2, update to version 10.6.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of subqueries with ORDER BY to minimize the risk of application crashes.

Exploit

Fix

Related Identifiers

ALSA-2022:1556

ALSA-2022:1557

ALT-PU-2021-2179

ALT-PU-2021-2222

ALT-PU-2021-2236

ALT-PU-2023-6462

AZL-8452

BIT-MARIADB-2021-46657

BIT-MARIADB-MIN-2021-46657

BIT-MYSQL-CLIENT-2021-46657

CESA-2022_1556

CESA-2022_1557

CVE-2021-46657

OESA-2022-1587

OPENSUSE-SU-2022:0731-1

OPENSUSE-SU-2022_0725-1

OPENSUSE-SU-2022_0726-1

OPENSUSE-SU-2022_0731-1

OPENSUSE-SU-2022_0731-2

OPENSUSE-SU-2022_2561-1

OPENSUSE-SU-2024:11867-1

RHSA-2022:1007

RHSA-2022:1010

RHSA-2022:1556

RHSA-2022:1557

RHSA-2022:4818

RHSA-2022_1556

RHSA-2022_1557

RHSA-2023:6821

RLSA-2022:1556

RLSA-2022:1557

ROSA-SA-2023-2252

SUSE-RU-2023:3956-1

SUSE-RU-2023:4991-1

SUSE-SU-2022:0725-1

SUSE-SU-2022:0726-1

SUSE-SU-2022:0731-1

SUSE-SU-2022:0731-2

SUSE-SU-2022:0782-1

SUSE-SU-2022:2561-1

SUSE-SU-2022_0725-1

SUSE-SU-2022_0726-1

SUSE-SU-2022_0731-1

SUSE-SU-2022_0782-1

SUSE-SU-2022_2561-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Mariadb

Mariadb Server

Red Hat

Rocky Linux

Suse

References · 515

• 🔥 https://github.com/drago-96/CVE-2022-0778 · Exploit
• 🔥 https://github.com/Al1ex/CVE-2021-27928 · Exploit
• 🔥 https://github.com/yywing/cve-2022-0778 · Exploit
• 🔥 https://github.com/jkakavas/CVE-2022-0778-POC · Exploit
• 🔥 https://jira.mariadb.org/browse/MDEV-25629 · Exploit
• 🔥❌ https://github.com/GatoGamer1155/CVE-2021-27928 · Exploit, Deleted
• https://errata.almalinux.org/8/ALSA-2022-1556.html · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mariadb-2021-46657 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:0731-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46665 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-46661 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:0731-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-46657 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:1556 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-RU-2023:4991-1 · Vendor Advisory