QID 355322

get_sort_by_table in mariadb before 10.6.2 allows an application crash via certain subquery uses of order by. (
( CVE-2021-46657) mariadb before 10.7.2 allows an application crash because it does not recognize that select_lex::nest_level is local to each view. (
( CVE-2021-46659) mariadb through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (cte). (
( CVE-2021-46661) mariadb through 10.5.13 allows a ha_maria::extra application crash via certain select statements. (
( CVE-2021-46663) mariadb before 10.6.2 allows an application crash because of mishandling of a pushdown from a having clause to a where clause. (
( CVE-2021-46666) an integer overflow vulnerability was found in mariadb, where an invalid size of ref_pointer_array is allocated.
This issue results in a denial of service. (
( CVE-2021-46667) mariadb through 10.5.9 allows an application crash via certain long select distinct statements that improperly interact with storage-engine resource limitations for temporary data structures. (
( CVE-2021-46668) an issue in the component my_decimal::operator= of mariadb server v10.6.3 and below was discovered to allow attackers to cause a denial of service (dos) via specially crafted sql statements. (
( CVE-2022-27380) an issue in the component item_subselect::init_expr_cache_tracker of mariadb server v10.6 and below was discovered to allow attackers to cause a denial of service (dos) via specially crafted sql statements. (
( CVE-2022-27384) mariadb server before 10.7 is vulnerable to denial of service.
( CVE-2022-31624)

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.