CVE catalog

CVE-2021-46668

ALPINE-

[CVE catalog]

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.40% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Ubuntu22.04mariadb-10.61:10.6.7-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.17-1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.18-1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.19-1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.21-2UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.22-1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.22-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.25-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.29-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.30-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.31-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.32-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]

Showing 12 observations. All 31 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Alpine3.12mariadb10.4.24-r0UnknownSource applicability is not established[ALPINE-CVE-2021-46668]
Alpine3.13mariadb10.5.15-r0UnknownSource applicability is not established[ALPINE-CVE-2021-46668]
Alpine3.14mariadb10.5.15-r0UnknownSource applicability is not established[ALPINE-CVE-2021-46668]
Alpine3.15mariadb10.6.7-r0UnknownSource applicability is not established[ALPINE-CVE-2021-46668]
Alpine3.16mariadb10.6.7-r0UnknownSource applicability is not established[ALPINE-CVE-2021-46668]
Alpine3.17mariadb10.6.7-r0UnknownSource applicability is not established[ALPINE-CVE-2021-46668]
Alpine3.18mariadb10.6.7-r0UnknownSource applicability is not established[ALPINE-CVE-2021-46668]
Alpine3.19mariadb10.6.7-r0UnknownSource applicability is not established[ALPINE-CVE-2021-46668]
Alpine3.20mariadb10.6.7-r0UnknownSource applicability is not established[ALPINE-CVE-2021-46668]
Alpine3.21mariadb10.6.7-r0UnknownSource applicability is not established[ALPINE-CVE-2021-46668]
Alpine3.22mariadb10.6.7-r0UnknownSource applicability is not established[ALPINE-CVE-2021-46668]
Alpine3.23mariadb10.6.7-r0UnknownSource applicability is not established[ALPINE-CVE-2021-46668]
Alpine3.24mariadb10.6.7-r0UnknownSource applicability is not established[ALPINE-CVE-2021-46668]
Debian11mariadb-10.51:10.5.11-1UnknownSource applicability is not established[DEBIAN-CVE-2021-46668]
Debian11mariadb-10.51:10.5.12-0+deb11u1UnknownSource applicability is not established[DEBIAN-CVE-2021-46668]
Debian11mariadb-10.51:10.5.12-1UnknownSource applicability is not established[DEBIAN-CVE-2021-46668]
Debian11mariadb-10.51:10.5.13-0+deb11u1UnknownSource applicability is not established[DEBIAN-CVE-2021-46668]
Debian11mariadb-10.51:10.5.15-0+deb11u1UnknownSource applicability is not established[DEBIAN-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.17-1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.18-1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.19-1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.21-2UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.22-1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.22-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.25-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.29-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.30-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.31-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.32-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu20.04mariadb-10.31:10.3.34-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Ubuntu22.04mariadb-10.61:10.6.7-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2021-46668]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "mariadb-10.5",
      "distro": "debian",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.5.15-0+deb11u1"
            }
          ]
        }
      ],
      "release": "11",
      "versions": [
        "1:10.5.11-1",
        "1:10.5.12-0+deb11u1",
        "1:10.5.12-1",
        "1:10.5.13-0+deb11u1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/DEBIAN-CVE-2021-46668",
      "fixed_version": "1:10.5.15-0+deb11u1",
      "provider_source": "pypi",
      "provider_record_id": "DEBIAN-CVE-2021-46668",
      "provider_updated_at": "2026-08-27T23:04:12.613932310Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "10.2.0"
            },
            {
              "fixed": "10.4.24-r0"
            }
          ]
        }
      ],
      "release": "3.12",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-46668",
      "fixed_version": "10.4.24-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-46668",
      "provider_updated_at": "2026-10-23T17:17:56.232607934Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "10.2.0"
            },
            {
              "fixed": "10.5.15-r0"
            }
          ]
        }
      ],
      "release": "3.13",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-46668",
      "fixed_version": "10.5.15-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-46668",
      "provider_updated_at": "2026-10-23T17:17:56.232607934Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "10.2.0"
            },
            {
              "fixed": "10.5.15-r0"
            }
          ]
        }
      ],
      "release": "3.14",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-46668",
      "fixed_version": "10.5.15-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-46668",
      "provider_updated_at": "2026-10-23T17:17:56.232607934Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "10.2.0"
            },
            {
              "fixed": "10.6.7-r0"
            }
          ]
        }
      ],
      "release": "3.15",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-46668",
      "fixed_version": "10.6.7-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-46668",
      "provider_updated_at": "2026-10-23T17:17:56.232607934Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "10.2.0"
            },
            {
              "fixed": "10.6.7-r0"
            }
          ]
        }
      ],
      "release": "3.16",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-46668",
      "fixed_version": "10.6.7-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-46668",
      "provider_updated_at": "2026-10-23T17:17:56.232607934Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "10.2.0"
            },
            {
              "fixed": "10.6.7-r0"
            }
          ]
        }
      ],
      "release": "3.17",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-46668",
      "fixed_version": "10.6.7-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-46668",
      "provider_updated_at": "2026-10-23T17:17:56.232607934Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "10.2.0"
            },
            {
              "fixed": "10.6.7-r0"
            }
          ]
        }
      ],
      "release": "3.18",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-46668",
      "fixed_version": "10.6.7-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-46668",
      "provider_updated_at": "2026-10-23T17:17:56.232607934Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "10.2.0"
            },
            {
              "fixed": "10.6.7-r0"
            }
          ]
        }
      ],
      "release": "3.19",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-46668",
      "fixed_version": "10.6.7-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-46668",
      "provider_updated_at": "2026-10-23T17:17:56.232607934Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "10.2.0"
            },
            {
              "fixed": "10.6.7-r0"
            }
          ]
        }
      ],
      "release": "3.20",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-46668",
      "fixed_version": "10.6.7-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-46668",
      "provider_updated_at": "2026-10-23T17:17:56.232607934Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "10.2.0"
            },
            {
              "fixed": "10.6.7-r0"
            }
          ]
        }
      ],
      "release": "3.21",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-46668",
      "fixed_version": "10.6.7-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-46668",
      "provider_updated_at": "2026-10-23T17:17:56.232607934Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "10.2.0"
            },
            {
              "fixed": "10.6.7-r0"
            }
          ]
        }
      ],
      "release": "3.22",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-46668",
      "fixed_version": "10.6.7-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-46668",
      "provider_updated_at": "2026-10-23T17:17:56.232607934Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "10.2.0"
            },
            {
              "fixed": "10.6.7-r0"
            }
          ]
        }
      ],
      "release": "3.23",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-46668",
      "fixed_version": "10.6.7-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-46668",
      "provider_updated_at": "2026-10-23T17:17:56.232607934Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "10.2.0"
            },
            {
              "fixed": "10.6.7-r0"
            }
          ]
        }
      ],
      "release": "3.24",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-46668",
      "fixed_version": "10.6.7-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-46668",
      "provider_updated_at": "2026-10-23T17:17:56.232607934Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb-10.3",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.3.34-0ubuntu0.20.04.1"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "1:10.3.17-1",
        "1:10.3.18-1",
        "1:10.3.19-1",
        "1:10.3.21-2",
        "1:10.3.22-1",
        "1:10.3.22-1ubuntu1",
        "1:10.3.25-0ubuntu0.20.04.1",
        "1:10.3.29-0ubuntu0.20.04.1",
        "1:10.3.30-0ubuntu0.20.04.1",
        "1:10.3.31-0ubuntu0.20.04.1",
        "1:10.3.32-0ubuntu0.20.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-46668",
      "fixed_version": "1:10.3.34-0ubuntu0.20.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-46668",
      "provider_updated_at": "2026-04-22T13:04:30.593253Z",
      "applicability_unknown": true
    },
    {
      "name": "mariadb-10.6",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:10.6.7-2ubuntu1"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-46668",
      "fixed_version": "1:10.6.7-2ubuntu1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-46668",
      "provider_updated_at": "2026-04-22T13:04:30.593253Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]