LiveActive security incident?Get immediate response
CVE Record

CVE-2021-46668: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that imprope...

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

This CVE describes a MariaDB crash condition. Certain long SELECT DISTINCT queries can trigger an application crash when temporary data structures hit storage-engine resource limits. The main business risk is database availability disruption, not data theft or remote code execution based on the provided sources.

Executive priority

Treat this as a targeted availability risk. Prioritize systems supporting critical services, customer-facing workloads, or user-driven search/reporting. The urgency is lower than a proven remote code execution issue, but outages can still be material.

Technical view

MariaDB through 10.5.9 is reported to crash when specific long SELECT DISTINCT statements interact improperly with storage-engine limitations for temporary data structures. The supplied record does not provide CVSS, CWE, confirmed exploit activity, or detailed affected CPEs.

Likely exposure

Exposure is most likely where MariaDB through 10.5.9 is deployed and untrusted or semi-trusted users can cause applications to issue complex SELECT DISTINCT queries. Internet exposure depends on application query controls, not just database reachability.

Exploitation context

The source bundle does not cite active exploitation, and KEV is false. The issue appears to require the ability to influence SQL workload shape. Evidence supports denial-of-service crash risk, but not privilege escalation, data compromise, or code execution.

Researcher notes

The provided evidence is sparse: no CVSS, CWE, exploit status, CPE list, or explicit fix version is included. Analysis should stay anchored to MariaDB through 10.5.9 and the crash condition described in the CVE record.

Mitigation direction

  • Inventory MariaDB deployments and identify versions through 10.5.9.
  • Check MariaDB, Fedora, NetApp, and OS vendor guidance for fixed packages.
  • Prioritize upgrades for databases serving user-controlled query paths.
  • Restrict application features that generate unusually large DISTINCT workloads.
  • Monitor database crash logs and restart patterns for suspicious query-related failures.

Validation and detection

  • Confirm running MariaDB versions across servers, containers, and appliances.
  • Review application paths where users can influence SELECT DISTINCT queries.
  • Check OS package advisory status for Fedora or vendor-managed MariaDB builds.
  • Review database logs for crashes near complex DISTINCT query execution.
  • Document downstream product exposure where NetApp or other vendors embed MariaDB.
Prepared
Confidence
medium
Sources
8

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2021-46668 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
7Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.