First published: Fri Sep 22 2023(Updated: )
A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/mariadb | <10.3.36 | 10.3.36 |
redhat/mariadb | <10.4.26 | 10.4.26 |
redhat/mariadb | <10.5.17 | 10.5.17 |
redhat/mariadb | <10.6.9 | 10.6.9 |
redhat/mariadb | <10.7.5 | 10.7.5 |
redhat/mariadb | <10.8.4 | 10.8.4 |
Ariadne CMS | <10.3.36 | |
Ariadne CMS | >=10.4.0<10.4.26 | |
Ariadne CMS | >=10.5.0<10.5.17 | |
Ariadne CMS | >=10.6.0<10.6.9 | |
Ariadne CMS | >=10.7.0<10.7.5 | |
Ariadne CMS | >=10.8.0<10.8.4 | |
Fedora | =38 | |
Red Hat Enterprise Linux | =8.0 | |
Red Hat Enterprise Linux | =9.0 | |
redhat enterprise Linux eus | =8.6 | |
redhat enterprise Linux eus | =8.8 | |
redhat enterprise Linux eus | =9.0 | |
redhat enterprise Linux eus | =9.2 | |
redhat enterprise Linux for arm 64 | =8.0_aarch64 | |
redhat enterprise Linux for arm 64 | =9.0_aarch64 | |
Red Hat Enterprise Linux for ARM64 EUS | =8.8_aarch64 | |
redhat enterprise Linux for ibm z systems | =8.0_s390x | |
redhat enterprise Linux for ibm z systems | =9.0_s390x | |
redhat enterprise Linux for ibm z systems | =9.2_s390x | |
redhat enterprise Linux for ibm z systems eus | =8.6_s390x | |
redhat enterprise Linux for ibm z systems eus | =8.8_s390x | |
redhat enterprise Linux for ibm z systems eus | =9.2_s390x | |
redhat enterprise Linux for power little endian | =8.0_ppc64le | |
redhat enterprise Linux for power little endian | =9.0_ppc64le | |
redhat enterprise Linux for power little endian eus | =8.8_ppc64le | |
redhat enterprise Linux for power little endian eus | =9.2_ppc64le | |
redhat enterprise Linux server aus | =8.4 | |
redhat enterprise Linux server aus | =8.6 | |
redhat enterprise Linux server aus | =9.2 | |
redhat enterprise Linux server tus | =8.4 | |
redhat enterprise Linux server tus | =8.6 | |
redhat enterprise Linux server tus | =8.8 | |
Ariadne CMS | <10.4.26 | |
redhat codeready Linux builder | =9.0 | |
redhat codeready linux builder for arm64 | =9.0_aarch64 | |
redhat codeready linux builder for arm64 eus | =9.2_aarch64 | |
redhat codeready linux builder for ibm z systems | =9.0_s390x | |
redhat codeready linux builder for ibm z systems eus | =9.2_s390x | |
redhat codeready Linux builder for power little endian | =9.0_ppc64le | |
redhat codeready linux builder for power little endian eus | =9.2_ppc64le |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2023-5157.
The severity level of CVE-2023-5157 is high.
CVE-2023-5157 allows a malicious remote client to cause a denial of service in MariaDB.
MariaDB versions up to and including 10.4.26, 10.5.17, 10.6.9, 10.7.5, and 10.8.4 are affected by CVE-2023-5157.
To fix the CVE-2023-5157 vulnerability, update MariaDB to version 10.4.26, 10.5.17, 10.6.9, 10.7.5, or 10.8.4.