CVE catalog

CVE-2021-46657

Security update for mariadb

[CVE catalog]

Severity
Low · CVSS 3.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.39% · Oct 22, 2026

get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianmariadb-10.5111:10.5.11-1fixed
Ubuntumariadb-10.320.041:10.3.17-1vulnerable
Ubuntumariadb-10.320.041:10.3.18-1vulnerable
Ubuntumariadb-10.320.041:10.3.19-1vulnerable
Ubuntumariadb-10.320.041:10.3.21-2vulnerable
Ubuntumariadb-10.320.041:10.3.22-1vulnerable
Ubuntumariadb-10.320.041:10.3.22-1ubuntu1vulnerable
Ubuntumariadb-10.320.041:10.3.25-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.29-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.30-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.31-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.32-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.34-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.37-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.38-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.39-0ubuntu0.20.04.2vulnerable
Susemariadbopenstack cloud 910.2.43-3.47.1fixed
Susemariadbopenstack cloud crowbar 910.2.43-3.47.1fixed
Susemariadblinux enterprise server for sap applications 12 sp410.2.43-3.47.1fixed
Susemariadblinux enterprise server 12 sp4-ltss10.2.43-3.47.1fixed
Susemariadblinux enterprise server 12 sp510.2.43-3.47.1fixed
Susemariadblinux enterprise server for sap applications 12 sp510.2.43-3.47.1fixed
Susemariadblinux enterprise module for server applications 15 sp310.5.15-150300.3.15.1fixed
Opensusemariadbleap 15.310.5.15-150300.3.15.1fixed
Susemariadblinux enterprise high performance computing 15 sp2-espos10.4.24-3.25.1fixed
Susemariadblinux enterprise high performance computing 15 sp2-ltss10.4.24-3.25.1fixed
Susemariadblinux enterprise real time 15 sp210.4.24-3.25.1fixed
Susemariadblinux enterprise server 15 sp2-bcl10.4.24-3.25.1fixed
Susemariadblinux enterprise server 15 sp2-ltss10.4.24-3.25.1fixed
Susemariadblinux enterprise server for sap applications 15 sp210.4.24-3.25.1fixed
Susemariadbmanager proxy 4.110.4.24-3.25.1fixed
Susemariadbmanager retail branch server 4.110.4.24-3.25.1fixed
Susemariadbmanager server 4.110.4.24-3.25.1fixed
Susemariadbenterprise storage 710.4.24-3.25.1fixed
Opensusemariadbtumbleweed10.7.3-1.1fixed
Susemariadblinux enterprise high performance computing 15-espos10.2.43-3.51.1fixed
Susemariadblinux enterprise high performance computing 15-ltss10.2.43-3.51.1fixed
Susemariadblinux enterprise high performance computing 15 sp1-espos10.2.43-3.51.1fixed
Susemariadblinux enterprise high performance computing 15 sp1-ltss10.2.43-3.51.1fixed
Susemariadblinux enterprise server 15-ltss10.2.43-3.51.1fixed
Susemariadblinux enterprise server 15 sp1-bcl10.2.43-3.51.1fixed
Susemariadblinux enterprise server 15 sp1-ltss10.2.43-3.51.1fixed
Susemariadblinux enterprise server for sap applications 1510.2.43-3.51.1fixed
Susemariadblinux enterprise server for sap applications 15 sp110.2.43-3.51.1fixed
Susemariadbenterprise storage 610.2.43-3.51.1fixed
Susemariadblinux enterprise module for server applications 15 sp410.6.8-150400.3.7.1fixed
Opensusemariadbleap 15.410.6.8-150400.3.7.1fixed
Opensusemariadbleap 15.410.5.15-150300.3.15.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianmariadb-10.5deb111:10.5.11-1Not reportedDEBIAN-CVE-2021-46657Not reported
Susemariadbrpmopenstack cloud 910.2.43-3.47.1Not reportedSUSE-SU-2022:0782-1Not reported
Susemariadbrpmopenstack cloud crowbar 910.2.43-3.47.1Not reportedSUSE-SU-2022:0782-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 12 sp410.2.43-3.47.1Not reportedSUSE-SU-2022:0782-1Not reported
Susemariadbrpmlinux enterprise server 12 sp4-ltss10.2.43-3.47.1Not reportedSUSE-SU-2022:0782-1Not reported
Susemariadbrpmlinux enterprise server 12 sp510.2.43-3.47.1Not reportedSUSE-SU-2022:0782-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 12 sp510.2.43-3.47.1Not reportedSUSE-SU-2022:0782-1Not reported
Susemariadbrpmlinux enterprise module for server applications 15 sp310.5.15-150300.3.15.1Not reportedSUSE-SU-2022:0731-1Not reported
Opensusemariadbrpmleap 15.310.5.15-150300.3.15.1Not reportedOPENSUSE-SU-2022:0731-1Not reported
Susemariadbrpmlinux enterprise high performance computing 15 sp2-espos10.4.24-3.25.1Not reportedSUSE-SU-2022:0726-1Not reported
Susemariadbrpmlinux enterprise high performance computing 15 sp2-ltss10.4.24-3.25.1Not reportedSUSE-SU-2022:0726-1Not reported
Susemariadbrpmlinux enterprise real time 15 sp210.4.24-3.25.1Not reportedSUSE-SU-2022:0726-1Not reported
Susemariadbrpmlinux enterprise server 15 sp2-bcl10.4.24-3.25.1Not reportedSUSE-SU-2022:0726-1Not reported
Susemariadbrpmlinux enterprise server 15 sp2-ltss10.4.24-3.25.1Not reportedSUSE-SU-2022:0726-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 15 sp210.4.24-3.25.1Not reportedSUSE-SU-2022:0726-1Not reported
Susemariadbrpmmanager proxy 4.110.4.24-3.25.1Not reportedSUSE-SU-2022:0726-1Not reported
Susemariadbrpmmanager retail branch server 4.110.4.24-3.25.1Not reportedSUSE-SU-2022:0726-1Not reported
Susemariadbrpmmanager server 4.110.4.24-3.25.1Not reportedSUSE-SU-2022:0726-1Not reported
Susemariadbrpmenterprise storage 710.4.24-3.25.1Not reportedSUSE-SU-2022:0726-1Not reported
Opensusemariadbrpmtumbleweed10.7.3-1.1Not reportedOPENSUSE-SU-2024:11867-1Not reported
Susemariadbrpmlinux enterprise high performance computing 15-espos10.2.43-3.51.1Not reportedSUSE-SU-2022:0725-1Not reported
Susemariadbrpmlinux enterprise high performance computing 15-ltss10.2.43-3.51.1Not reportedSUSE-SU-2022:0725-1Not reported
Susemariadbrpmlinux enterprise high performance computing 15 sp1-espos10.2.43-3.51.1Not reportedSUSE-SU-2022:0725-1Not reported
Susemariadbrpmlinux enterprise high performance computing 15 sp1-ltss10.2.43-3.51.1Not reportedSUSE-SU-2022:0725-1Not reported
Susemariadbrpmlinux enterprise server 15-ltss10.2.43-3.51.1Not reportedSUSE-SU-2022:0725-1Not reported
Susemariadbrpmlinux enterprise server 15 sp1-bcl10.2.43-3.51.1Not reportedSUSE-SU-2022:0725-1Not reported
Susemariadbrpmlinux enterprise server 15 sp1-ltss10.2.43-3.51.1Not reportedSUSE-SU-2022:0725-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 1510.2.43-3.51.1Not reportedSUSE-SU-2022:0725-1Not reported
Susemariadbrpmlinux enterprise server for sap applications 15 sp110.2.43-3.51.1Not reportedSUSE-SU-2022:0725-1Not reported
Susemariadbrpmenterprise storage 610.2.43-3.51.1Not reportedSUSE-SU-2022:0725-1Not reported
Susemariadbrpmlinux enterprise module for server applications 15 sp410.6.8-150400.3.7.1Not reportedSUSE-SU-2022:2561-1Not reported
Opensusemariadbrpmleap 15.410.6.8-150400.3.7.1Not reportedSUSE-SU-2022:2561-1Not reported
Opensusemariadbrpmleap 15.410.5.15-150300.3.15.1Not reportedSUSE-SU-2022:0731-2Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [libmariadbd19]Unknown

    Source package: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.7.3-1.1

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [libmariadbd-devel]Unknown

    Source package: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.7.3-1.1

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb-bench]Unknown

    Source package: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.7.3-1.1

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb-client]Unknown

    Source package: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.7.3-1.1

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb-errormessages]Unknown

    Source package: [mariadb]

    Details (1)

    • 12.3.2-1.3 · noarch · tumbleweed

      Unknown · Fixed: 10.7.3-1.1

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb-galera]Unknown

    Source package: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.7.3-1.1

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb-rpm-macros]Unknown

    Source package: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.7.3-1.1

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb-test]Unknown

    Source package: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.7.3-1.1

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb-tools]Unknown

    Source package: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 10.7.3-1.1

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb]Fixed

    Source package: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Fixed · Fixed: 10.7.3-1.1

      pypi · mariadb · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]