First published: Fri Sep 22 2023(Updated: )
A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/mariadb | <10.3.36 | 10.3.36 |
redhat/mariadb | <10.4.26 | 10.4.26 |
redhat/mariadb | <10.5.17 | 10.5.17 |
redhat/mariadb | <10.6.9 | 10.6.9 |
redhat/mariadb | <10.7.5 | 10.7.5 |
redhat/mariadb | <10.8.4 | 10.8.4 |
MariaDB | <10.3.36 | |
MariaDB | >=10.4.0<10.4.26 | |
MariaDB | >=10.5.0<10.5.17 | |
MariaDB | >=10.6.0<10.6.9 | |
MariaDB | >=10.7.0<10.7.5 | |
MariaDB | >=10.8.0<10.8.4 | |
Red Hat Fedora | =38 | |
Red Hat Enterprise Linux | =8.0 | |
Red Hat Enterprise Linux | =9.0 | |
Red Hat Enterprise Linux Server EUS | =8.6 | |
Red Hat Enterprise Linux Server EUS | =8.8 | |
Red Hat Enterprise Linux Server EUS | =9.0 | |
Red Hat Enterprise Linux Server EUS | =9.2 | |
Red Hat Enterprise Linux | =8.0_aarch64 | |
Red Hat Enterprise Linux | =9.0_aarch64 | |
Red Hat Enterprise Linux for ARM64 EUS | =8.8_aarch64 | |
Red Hat Enterprise Linux for IBM Z Systems | =8.0_s390x | |
Red Hat Enterprise Linux for IBM Z Systems | =9.0_s390x | |
Red Hat Enterprise Linux for IBM Z Systems | =9.2_s390x | |
Red Hat Enterprise Linux for IBM Z Systems (s390x) | =8.6_s390x | |
Red Hat Enterprise Linux for IBM Z Systems (s390x) | =8.8_s390x | |
Red Hat Enterprise Linux for IBM Z Systems (s390x) | =9.2_s390x | |
Red Hat Enterprise Linux for Power, little endian | =8.0_ppc64le | |
Red Hat Enterprise Linux for Power, little endian | =9.0_ppc64le | |
Red Hat Enterprise Linux for Power, little endian - Extended Update Support | =8.8_ppc64le | |
Red Hat Enterprise Linux for Power, little endian - Extended Update Support | =9.2_ppc64le | |
Red Hat Enterprise Linux Server | =8.4 | |
Red Hat Enterprise Linux Server | =8.6 | |
Red Hat Enterprise Linux Server | =9.2 | |
Red Hat Enterprise Linux Server | =8.4 | |
Red Hat Enterprise Linux Server | =8.6 | |
Red Hat Enterprise Linux Server | =8.8 | |
MariaDB | <10.4.26 | |
Red Hat CodeReady Linux Builder | =9.0 | |
Red Hat CodeReady Linux Builder for ARM 64 | =9.0_aarch64 | |
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support | =9.2_aarch64 | |
Red Hat CodeReady Linux Builder for IBM z Systems | =9.0_s390x | |
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support | =9.2_s390x | |
Red Hat CodeReady Linux Builder for Power, little endian | =9.0_ppc64le | |
Red Hat CodeReady Linux Builder for Power, little endian | =9.2_ppc64le |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2023-5157.
The severity level of CVE-2023-5157 is high.
CVE-2023-5157 allows a malicious remote client to cause a denial of service in MariaDB.
MariaDB versions up to and including 10.4.26, 10.5.17, 10.6.9, 10.7.5, and 10.8.4 are affected by CVE-2023-5157.
To fix the CVE-2023-5157 vulnerability, update MariaDB to version 10.4.26, 10.5.17, 10.6.9, 10.7.5, or 10.8.4.