PT-2021-7932 · Mariadb+6 · Mariadb+7

Zuming Jiang · Published 2021-06-23 · Updated 2025-06-10 · CVE-2021-46666

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MariaDB versions prior to 10.6.2

Description The issue is related to the mishandling of a pushdown from a HAVING clause to a WHERE clause, which can cause an application crash. This can be exploited by an attacker to disrupt service.

Recommendations For versions prior to 10.6.2, update to version 10.6.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of HAVING and WHERE clauses in queries until a patch is applied.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

ALSA-2022:1556

ALSA-2022:1557

ALT-PU-2021-2179

ALT-PU-2021-2222

ALT-PU-2021-2236

ALT-PU-2023-6462

AZL-8410

BDU:2023-05660

BIT-MARIADB-2021-46666

BIT-MARIADB-MIN-2021-46666

BIT-MYSQL-CLIENT-2021-46666

CESA-2022_1556

CESA-2022_1557

CVE-2021-46666

OESA-2022-1587

RHSA-2022:1007

RHSA-2022:1010

RHSA-2022:1556

RHSA-2022:1557

RHSA-2022:4818

RHSA-2022_1556

RHSA-2022_1557

RHSA-2023:6821

RLSA-2022:1556

RLSA-2022:1557

ROSA-SA-2023-2252

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Mariadb

Mariadb Server

Red Hat

Rocky Linux

References · 79

• 🔥 https://github.com/drago-96/CVE-2022-0778 · Exploit
• 🔥 https://github.com/Al1ex/CVE-2021-27928 · Exploit
• 🔥 https://github.com/yywing/cve-2022-0778 · Exploit
• 🔥 https://github.com/jkakavas/CVE-2022-0778-POC · Exploit
• 🔥 https://jira.mariadb.org/browse/MDEV-25635 · Exploit
• 🔥❌ https://github.com/GatoGamer1155/CVE-2021-27928 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2021-46667 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-46666 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2022-1557.html · Vendor Advisory
• https://mariadb.com/kb/en/security · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-1557.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46669 · Security Note
• https://bdu.fstec.ru/vul/2023-05660 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-46666 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mariadb-2021-46666 · Vendor Advisory