Vulnerability · Published Feb 1, 2022 · Assigned by mitre
CVE-2021-46667
Medium 5.5
In plain English
A medium-severity security flaw in the Judy package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.4%top 63.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | Judy | 1.0.5-18.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | Judy | 1.0.5-18.module_el8.6.0+2867+72759d2f | ALSA-2022:1557 |
| AlmaLinux:8 | Judy | 1.0.5-18.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | Judy | 1.0.5-18.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | Judy | 1.0.5-18.module_el8.6.0+2761+593e5e59 | ALSA-2022:1556 |
| AlmaLinux:8 | Judy | 1.0.5-18.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | galera | 26.4.9-4.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | galera | 25.3.34-4.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | galera | 25.3.34-4.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | galera | 26.4.9-4.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb | 3:10.3.32-2.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-backup | 3:10.3.32-2.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-backup | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-backup | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-backup | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-common | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-common | 3:10.3.32-2.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-common | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-common | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-devel | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-devel | 3:10.3.32-2.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-devel | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-devel | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-embedded | 3:10.3.32-2.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-embedded | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-embedded | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-embedded | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-embedded-devel | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-embedded-devel | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-embedded-devel | 3:10.3.32-2.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-embedded-devel | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-errmsg | 3:10.3.32-2.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-errmsg | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-errmsg | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-errmsg | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-gssapi-server | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-gssapi-server | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-gssapi-server | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-gssapi-server | 3:10.3.32-2.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-oqgraph-engine | 3:10.3.32-2.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-oqgraph-engine | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-oqgraph-engine | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-oqgraph-engine | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-pam | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-pam | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-server | 3:10.3.32-2.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-server | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-server | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-server | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-server-galera | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-server-galera | 3:10.3.32-2.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-server-galera | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-server-galera | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-server-utils | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-server-utils | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-server-utils | 3:10.3.32-2.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-server-utils | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-test | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-test | 3:10.3.32-2.module_el8.6.0+2867+72759d2f | ALSA-2022:1556 |
| AlmaLinux:8 | mariadb-test | 3:10.5.13-1.module_el8.6.0+2761+593e5e59 | ALSA-2022:1557 |
| AlmaLinux:8 | mariadb-test | 3:10.5.13-1.module_el8.5.0+2637+d11efe18 | ALSA-2022:1557 |
| Alpine:v3.20 | mariadb | 10.6.7-r0 | ALPINE-CVE-2021-46667 |
| Alpine:v3.21 | mariadb | 10.6.7-r0 | ALPINE-CVE-2021-46667 |
| Alpine:v3.22 | mariadb | 10.6.7-r0 | ALPINE-CVE-2021-46667 |
| Alpine:v3.23 | mariadb | 10.6.7-r0 | ALPINE-CVE-2021-46667 |
| Alpine:v3.24 | mariadb | 10.6.7-r0 | ALPINE-CVE-2021-46667 |
| Rocky Linux:8 | Judy | 0:1.0.5-18.module+el8.4.0+427+adf35707 | RLSA-2022:1557 |
| Rocky Linux:8 | Judy | 0:1.0.5-18.module+el8.4.0+427+adf35707 | RLSA-2022:1556 |
| Rocky Linux:8 | galera | 0:25.3.34-4.module+el8.5.0+777+18007c86 | RLSA-2022:1556 |
| Rocky Linux:8 | galera | 0:26.4.9-4.module+el8.5.0+773+f75e97f7 | RLSA-2022:1557 |
| Rocky Linux:8 | mariadb | 3:10.5.13-1.module+el8.5.0+773+f75e97f7 | RLSA-2022:1557 |
| Rocky Linux:8 | mariadb | 3:10.3.32-2.module+el8.5.0+777+18007c86 | RLSA-2022:1556 |
Affected products (as reported)
References
- https://jira.mariadb.org/browse/MDEV-26350 x_refsource_MISC
- https://security.netapp.com/advisory/ntap-20220221-0002/ x_refsource_CONFIRM
- https://mariadb.com/kb/en/security/ x_refsource_CONFIRM
- FEDORA-2022-263f7cc483 vendor-advisory, x_refsource_FEDORA
- FEDORA-2022-03350936ee vendor-advisory, x_refsource_FEDORA
- FEDORA-2022-5cfe372ab7 vendor-advisory, x_refsource_FEDORA