CVE-2023-5157

HIGH EPSS 78.5%
Published Sep 27, 20232y ago · Modified Jun 17, 20262w ago
7.5 CVSS 3.1
High
Find Similar
Published Sep 27, 2023 2y ago
Last Modified Jun 17, 2026 2w ago

Description

A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.

CVSS Details

Base Score
7.5
Exploitability
3.9
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
78.5% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-400 Uncontrolled Resource Consumption Resource Mgmt

Affected Products 32

VendorProductVersionRange
mariadbmariadb* <10.3.36
mariadbmariadb*≥10.4.0  –  <10.4.26
mariadbmariadb*≥10.5.0  –  <10.5.17
mariadbmariadb*≥10.6.0  –  <10.6.9
mariadbmariadb*≥10.7.0  –  <10.7.5
mariadbmariadb*≥10.8.0  –  <10.8.4
fedoraprojectfedora38any
redhatenterprise_linux8.0any
redhatenterprise_linux9.0any
redhatenterprise_linux_eus8.6any
redhatenterprise_linux_eus8.8any
redhatenterprise_linux_eus9.0any
redhatenterprise_linux_eus9.2any
redhatenterprise_linux_for_arm_648.0_aarch64any
redhatenterprise_linux_for_arm_649.0_aarch64any
redhatenterprise_linux_for_arm_64_eus8.8_aarch64any
redhatenterprise_linux_for_ibm_z_systems8.0_s390xany
redhatenterprise_linux_for_ibm_z_systems9.0_s390xany
redhatenterprise_linux_for_ibm_z_systems9.2_s390xany
redhatenterprise_linux_for_ibm_z_systems_eus8.6_s390xany
redhatenterprise_linux_for_ibm_z_systems_eus8.8_s390xany
redhatenterprise_linux_for_ibm_z_systems_eus9.2_s390xany
redhatenterprise_linux_for_power_little_endian8.0_ppc64leany
redhatenterprise_linux_for_power_little_endian9.0_ppc64leany
redhatenterprise_linux_for_power_little_endian_eus8.8_ppc64leany
redhatenterprise_linux_for_power_little_endian_eus9.2_ppc64leany
redhatenterprise_linux_server_aus8.4any
redhatenterprise_linux_server_aus8.6any
redhatenterprise_linux_server_aus9.2any
redhatenterprise_linux_server_tus8.4any
redhatenterprise_linux_server_tus8.6any
redhatenterprise_linux_server_tus8.8any

References 9

  • access.redhat.com https://access.redhat.com/errata/RHSA-2023:5259
  • access.redhat.com https://access.redhat.com/errata/RHSA-2023:5683
    Third Party Advisory
  • access.redhat.com https://access.redhat.com/errata/RHSA-2023:5684
    Third Party Advisory
  • access.redhat.com https://access.redhat.com/errata/RHSA-2023:6821
    Third Party Advisory
  • access.redhat.com https://access.redhat.com/errata/RHSA-2023:6822
    Third Party Advisory
  • access.redhat.com https://access.redhat.com/errata/RHSA-2023:6883
    Third Party Advisory
  • access.redhat.com https://access.redhat.com/errata/RHSA-2023:7633
    Third Party Advisory
  • access.redhat.com https://access.redhat.com/security/cve/CVE-2023-5157
    Third Party Advisory
  • bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=2240246
    Issue TrackingThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.