CVE-2021-46669

Name	CVE-2021-46669
Description	MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-3114-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
mariadb-10.5 (PTS)	bullseye	1:10.5.23-0+deb11u1	fixed
	bullseye (security)	1:10.5.26-0+deb11u2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
mariadb-10.3	source	buster	1:10.3.36-0+deb10u1	DLA-3114-1
mariadb-10.3	source	(unstable)	(unfixed)
mariadb-10.5	source	bullseye	1:10.5.18-0+deb11u1
mariadb-10.5	source	(unstable)	(unfixed)
mariadb-10.6	source	(unstable)	1:10.6.7-1

Notes

MariaDB Bug: https://jira.mariadb.org/browse/MDEV-25638
Commit MariaDB: https://github.com/MariaDB/server/commit/c274853c0797801de0398699d60c8579c45d1f61 (mariadb-10.2.44)
Fixed in MariaDB: 10.2.44, 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4