CVE-2021-46667

galera: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL

CVE-2021-46667 is fixed in 63 products on 1 platform, first by DEBIAN-CVE-2021-46667, released February 1, 2022. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0043
37th percentile

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb (10.5.13), galera (26.4.9). (BZ#2050546) Security Fix(es): * mysql: Server: DML unspecified vulnerability (CPU Apr 2021) (CVE-2021-2154) * mysql: Server: DML unspecified vulnerability (CPU Apr 2021) (CVE-2021-2166) * mysql: InnoDB unspecified vulnerability (CPU Jul 2021) (CVE-2021-2372) * mysql: InnoDB unspecified vulnerability (CPU Jul 2021) (CVE-2021-2389) * mysql: InnoDB unspecified vulnerability (CPU Oct 2021) (CVE-2021-35604) * mariadb: Integer overflow in sql_lex.cc integer leading to crash (CVE-2021-46667) * mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref (CVE-2021-46657) * mariadb: save_window_function_values triggers an abort during IN subquery (CVE-2021-46658) * mariadb: Crash in set_var.cc via certain UPDATE queries with nested subqueries (CVE-2021-46662) * mariadb: Crash caused by mishandling of a pushdown from a HAVING clause to a WHERE clause (CVE-2021-46666) * mariadb: No password masking in audit log when using ALTER USER <user> IDENTIFIED BY <password> command (BZ#1981332) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * mariadb-10.5-module: /etc/security/user_map.conf getting overwritten with mariadb-server upgrade (BZ#2050515) * mariadb-server:10.5 in centos8 stream is not shipping wsrep_sst_rsync_tunnel (BZ#2050524) * Galera doesn't work without 'procps-ng' package MariaDB-10.5 (BZ#2050542)

Where it's fixed

ProductFixed inFixReleased
Linux
Judy · RHEL 8 0:1.0.5-18.module+el8.4.0+9031+9abc7af9 RHSA-2022:1557 Apr 26, 2022
Judy · almalinux 8 1.0.5-18.module_el8.6.0+2867+72759d2f ALSA-2022:1557 Apr 26, 2022
Judy · ol 8 0:1.0.5-18.module+el8.4.0+20040+caf70fad ELSA-2022-1557 May 3, 2022
Judy · rocky 8 0:1.0.5-18.module+el8.4.0+427+adf35707 RLSA-2022:1557 Apr 26, 2022
galera · RHEL 8 0:26.4.9-4.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
galera · almalinux 8 26.4.9-4.module_el8.6.0+2761+593e5e59 ALSA-2022:1557 Apr 26, 2022
galera · ol 8 0:26.4.9-4.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
galera · rocky 8 0:26.4.9-4.module+el8.5.0+773+f75e97f7 RLSA-2022:1557 Apr 26, 2022
libmariadb-dev-compat · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 libmariadb-dev-compat 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
libmariadb3 · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 libmariadb3 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
libmariadbd19 · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 libmariadbd19 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb · RHEL 8 3:10.5.13-1.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
mariadb · almalinux 8 3:10.5.13-1.module_el8.5.0+2637+d11efe18 ALSA-2022:1557 Apr 26, 2022
mariadb · ol 8 3:10.5.13-1.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
mariadb · rocky 8 3:10.5.13-1.module+el8.5.0+773+f75e97f7 RLSA-2022:1557 Apr 26, 2022
mariadb-10.5 · Debian 11.6 (bullseye) 1:10.5.15-0+deb11u1 DEBIAN-CVE-2021-46667 Feb 1, 2022
mariadb-backup · RHEL 8 3:10.5.13-1.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
mariadb-backup · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-backup 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-backup · almalinux 8 3:10.5.13-1.module_el8.6.0+2761+593e5e59 ALSA-2022:1557 Apr 26, 2022
mariadb-backup · ol 8 3:10.5.13-1.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
mariadb-client · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-client 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-client-10.3 · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-client-10.3 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-client-core-10.3 · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-client-core-10.3 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-common · RHEL 8 3:10.5.13-1.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
mariadb-common · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-common 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-common · almalinux 8 3:10.5.13-1.module_el8.6.0+2761+593e5e59 ALSA-2022:1557 Apr 26, 2022
mariadb-common · ol 8 3:10.5.13-1.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
mariadb-devel · RHEL 8 3:10.5.13-1.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
mariadb-devel · almalinux 8 3:10.5.13-1.module_el8.5.0+2637+d11efe18 ALSA-2022:1557 Apr 26, 2022
mariadb-devel · ol 8 3:10.5.13-1.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
mariadb-embedded · RHEL 8 3:10.5.13-1.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
mariadb-embedded · almalinux 8 3:10.5.13-1.module_el8.6.0+2761+593e5e59 ALSA-2022:1557 Apr 26, 2022
mariadb-embedded · ol 8 3:10.5.13-1.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
mariadb-embedded-devel · RHEL 8 3:10.5.13-1.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
mariadb-embedded-devel · almalinux 8 3:10.5.13-1.module_el8.6.0+2761+593e5e59 ALSA-2022:1557 Apr 26, 2022
mariadb-embedded-devel · ol 8 3:10.5.13-1.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
mariadb-errmsg · RHEL 8 3:10.5.13-1.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
mariadb-errmsg · almalinux 8 3:10.5.13-1.module_el8.6.0+2761+593e5e59 ALSA-2022:1557 Apr 26, 2022
mariadb-errmsg · ol 8 3:10.5.13-1.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
mariadb-gssapi-server · RHEL 8 3:10.5.13-1.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
mariadb-gssapi-server · almalinux 8 3:10.5.13-1.module_el8.6.0+2761+593e5e59 ALSA-2022:1557 Apr 26, 2022
mariadb-gssapi-server · ol 8 3:10.5.13-1.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
mariadb-oqgraph-engine · RHEL 8 3:10.5.13-1.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
mariadb-oqgraph-engine · almalinux 8 3:10.5.13-1.module_el8.6.0+2761+593e5e59 ALSA-2022:1557 Apr 26, 2022
mariadb-oqgraph-engine · ol 8 3:10.5.13-1.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
mariadb-pam · RHEL 8 3:10.5.13-1.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
mariadb-pam · almalinux 8 3:10.5.13-1.module_el8.6.0+2761+593e5e59 ALSA-2022:1557 Apr 26, 2022
mariadb-pam · ol 8 3:10.5.13-1.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
mariadb-plugin-connect · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-plugin-connect 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-plugin-cracklib-password-check · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-plugin-cracklib-password-check 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-plugin-gssapi-client · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-plugin-gssapi-client 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-plugin-gssapi-server · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-plugin-gssapi-server 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-plugin-mroonga · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-plugin-mroonga 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-plugin-oqgraph · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-plugin-oqgraph 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-plugin-rocksdb · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-plugin-rocksdb 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-plugin-spider · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-plugin-spider 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-plugin-tokudb · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-plugin-tokudb 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-server · RHEL 8 3:10.5.13-1.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
mariadb-server · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-server 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-server · almalinux 8 3:10.5.13-1.module_el8.5.0+2637+d11efe18 ALSA-2022:1557 Apr 26, 2022
mariadb-server · ol 8 3:10.5.13-1.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
mariadb-server-10.3 · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-server-10.3 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-server-core-10.3 · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-server-core-10.3 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-server-galera · RHEL 8 3:10.5.13-1.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
mariadb-server-galera · almalinux 8 3:10.5.13-1.module_el8.6.0+2761+593e5e59 ALSA-2022:1557 Apr 26, 2022
mariadb-server-galera · ol 8 3:10.5.13-1.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
mariadb-server-utils · RHEL 8 3:10.5.13-1.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
mariadb-server-utils · almalinux 8 3:10.5.13-1.module_el8.6.0+2761+593e5e59 ALSA-2022:1557 Apr 26, 2022
mariadb-server-utils · ol 8 3:10.5.13-1.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
mariadb-test · RHEL 8 3:10.5.13-1.module+el8.5.0+14125+d11efe18 RHSA-2022:1557 Apr 26, 2022
mariadb-test · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-test 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb-test · almalinux 8 3:10.5.13-1.module_el8.6.0+2761+593e5e59 ALSA-2022:1557 Apr 26, 2022
mariadb-test · ol 8 3:10.5.13-1.module+el8.5.0+20630+d7805586 ELSA-2022-1557 May 3, 2022
mariadb-test-data · Ubuntu 20.04 LTS (focal) 1:10.3.34-0ubuntu0.20.04.1 mariadb-test-data 1:10.3.34-0ubuntu0.20.04.1 Feb 18, 2022
mariadb105 · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-backup · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-backup-debuginfo · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-common · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-connect-engine · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-connect-engine-debuginfo · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-cracklib-password-check · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-cracklib-password-check-debuginfo · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-debuginfo · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-debugsource · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-devel · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-errmsg · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-gssapi-server · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-gssapi-server-debuginfo · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-oqgraph-engine · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-oqgraph-engine-debuginfo · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-pam · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-pam-debuginfo · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-rocksdb-engine · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-rocksdb-engine-debuginfo · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-server · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-server-debuginfo · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-server-utils · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-server-utils-debuginfo · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-sphinx-engine · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-sphinx-engine-debuginfo · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-test · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023
mariadb105-test-debuginfo · amzn 2023 3:10.5.16-1.amzn2023.0.7 ALAS2023-2023-037 Feb 17, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.