CVE-2021-46666: 
MariaDB Server vulnerability analysis and mitigation

CVE-2021-46666 affects MariaDB versions before 10.6.2, causing an application crash due to mishandling of a pushdown from a HAVING clause to a WHERE clause. The vulnerability was discovered in early 2021 and fixed in multiple MariaDB versions including 10.2.39, 10.3.30, 10.4.20, and 10.5.11 (MariaDB Security, NVD).

The vulnerability stems from an assertion failure that occurs when pushing conditions from a HAVING clause into a WHERE clause of a view. This issue was identified through fuzzing testing and can result in a system crash. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating local access is required for exploitation (MariaDB Issue).

When successfully exploited, this vulnerability leads to a Denial of Service (DoS) condition through an application crash. The impact is limited to availability, with no direct effect on confidentiality or integrity of the system (NetApp Advisory).

The vulnerability has been fixed in MariaDB versions 10.2.39, 10.3.30, 10.4.20, and 10.5.11. Users are advised to upgrade to these or later versions to mitigate the vulnerability. No temporary workarounds have been published (MariaDB Security).