CVE-2021-46657: MariaDB

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.

Affected products

• MariaDB MariaDB: from 5.5.20, up to and including 5.5.68; from 10.0.0, before 10.2.39 (fixed in 10.2.39); from 10.3.0, before 10.3.30 (fixed in 10.3.30); from 10.4.0, before 10.4.20 (fixed in 10.4.20); from 10.5.0, before 10.5.11 (fixed in 10.5.11); from 10.6.0, before 10.6.2 (fixed in 10.6.2)

Published 2022-01-29. Last modified 2026-06-17.