CVE-2021-46669: 
MariaDB Server vulnerability analysis and mitigation

CVE-2021-46669 affects MariaDB through version 10.5.9, allowing attackers to trigger a convertconstto_int use-after-free vulnerability when the BIGINT data type is used. The vulnerability was discovered and reported through the MariaDB issue tracking system (MariaDB Issue).

The vulnerability is classified as a use-after-free (CWE-416) security flaw. It has been assigned a CVSS v3.1 Base Score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating that it is network accessible, requires low attack complexity, needs no privileges or user interaction, and can result in high availability impact (NVD).

The successful exploitation of this vulnerability could lead to Denial of Service (DoS) conditions in affected MariaDB installations. The vulnerability specifically affects the availability of the system while having no direct impact on confidentiality or integrity (NetApp Advisory).

The vulnerability has been fixed in multiple MariaDB versions including 10.2.44, 10.3.35, 10.4.25, 10.5.16, and 10.6.8. Users are advised to upgrade to these or later versions to mitigate the vulnerability. The fixes have been distributed through various Linux distributions including Debian and Fedora (Debian Advisory, Fedora Update).