CVE-2023-5157

HIGH

MariaDB < 10.3.36 - Denial of Service via OpenVAS Port Scan

Title source: llm
STIX 2.1

Description

A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.

References (9)

Core 9
Core References
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2023:5683
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2023:5684
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2023:6821
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2023:6822
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2023:6883
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2023:7633
Third Party Advisory vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2023-5157
Issue Tracking, Third Party Advisory issue-tracking x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2240246
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2023:5259

Scores

CVSS v3 7.5
EPSS 0.0062
EPSS Percentile 70.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-400
Status published
Products (40)
fedoraproject/fedora 38
mariadb/mariadb < 10.3.36
Red Hat/Red Hat Enterprise Linux 7
Red Hat/Red Hat Enterprise Linux 8 8080020230814130040.63b34585
Red Hat/Red Hat Enterprise Linux 8 8080020231003163755.63b34585
Red Hat/Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020231006044227.522a0ee4
Red Hat/Red Hat Enterprise Linux 8.4 Telecommunications Update Service 8040020231006044227.522a0ee4
Red Hat/Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions 8040020231006044227.522a0ee4
Red Hat/Red Hat Enterprise Linux 8.6 Extended Update Support 8060020231005052631.ad008a3a
Red Hat/Red Hat Enterprise Linux 9 0:26.4.14-1.el9_2
... and 30 more
Published Sep 27, 2023
Tracked Since Feb 18, 2026