Vulnerability · Published Sep 26, 2023 · Assigned by redhat
CVE-2023-5157Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6
High 7.5
In plain English
A high-severity uncontrolled resource consumption in Red Hat Enterprise Linux 7 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.3% (higher than 83% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)2.3%top 17.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | Judy | 1.0.5-18.module_el8.6.0+3138+72759d2f | ALSA-2023:5259 |
| AlmaLinux:8 | Judy | 1.0.5-18.module_el8.6.0+2867+72759d2f | ALSA-2023:5259 |
| AlmaLinux:8 | Judy | 1.0.5-18.module_el8.6.0+3072+3c630e87 | ALSA-2023:5683 |
| AlmaLinux:8 | Judy | 1.0.5-18.module_el8.6.0+3139+3c630e87 | ALSA-2023:5683 |
| AlmaLinux:8 | galera | 25.3.37-1.module_el8.8.0+3609+204d4ab0 | ALSA-2023:5259 |
| AlmaLinux:8 | galera | 26.4.14-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:9 | galera | 26.4.14-1.el9_2.alma.1 | ALSA-2023:5684 |
| AlmaLinux:8 | mariadb | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:8 | mariadb | 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | ALSA-2023:5259 |
| AlmaLinux:9 | mariadb | 3:10.5.22-1.el9_2.alma.1 | ALSA-2023:5684 |
| AlmaLinux:8 | mariadb-backup | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:8 | mariadb-backup | 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | ALSA-2023:5259 |
| AlmaLinux:9 | mariadb-backup | 3:10.5.22-1.el9_2.alma.1 | ALSA-2023:5684 |
| AlmaLinux:8 | mariadb-common | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:8 | mariadb-common | 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | ALSA-2023:5259 |
| AlmaLinux:9 | mariadb-common | 3:10.5.22-1.el9_2.alma.1 | ALSA-2023:5684 |
| AlmaLinux:8 | mariadb-devel | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:8 | mariadb-devel | 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | ALSA-2023:5259 |
| AlmaLinux:9 | mariadb-devel | 3:10.5.22-1.el9_2.alma.1 | ALSA-2023:5684 |
| AlmaLinux:8 | mariadb-embedded | 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | ALSA-2023:5259 |
| AlmaLinux:8 | mariadb-embedded | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:9 | mariadb-embedded | 3:10.5.22-1.el9_2.alma.1 | ALSA-2023:5684 |
| AlmaLinux:8 | mariadb-embedded-devel | 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | ALSA-2023:5259 |
| AlmaLinux:8 | mariadb-embedded-devel | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:9 | mariadb-embedded-devel | 3:10.5.22-1.el9_2.alma.1 | ALSA-2023:5684 |
| AlmaLinux:8 | mariadb-errmsg | 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | ALSA-2023:5259 |
| AlmaLinux:8 | mariadb-errmsg | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:9 | mariadb-errmsg | 3:10.5.22-1.el9_2.alma.1 | ALSA-2023:5684 |
| AlmaLinux:8 | mariadb-gssapi-server | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:8 | mariadb-gssapi-server | 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | ALSA-2023:5259 |
| AlmaLinux:9 | mariadb-gssapi-server | 3:10.5.22-1.el9_2.alma.1 | ALSA-2023:5684 |
| AlmaLinux:8 | mariadb-oqgraph-engine | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:8 | mariadb-oqgraph-engine | 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | ALSA-2023:5259 |
| AlmaLinux:9 | mariadb-oqgraph-engine | 3:10.5.22-1.el9_2.alma.1 | ALSA-2023:5684 |
| AlmaLinux:8 | mariadb-pam | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:9 | mariadb-pam | 3:10.5.22-1.el9_2.alma.1 | ALSA-2023:5684 |
| AlmaLinux:8 | mariadb-server | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:8 | mariadb-server | 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | ALSA-2023:5259 |
| AlmaLinux:9 | mariadb-server | 3:10.5.22-1.el9_2.alma.1 | ALSA-2023:5684 |
| AlmaLinux:8 | mariadb-server-galera | 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | ALSA-2023:5259 |
| AlmaLinux:8 | mariadb-server-galera | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:9 | mariadb-server-galera | 3:10.5.22-1.el9_2.alma.1 | ALSA-2023:5684 |
| AlmaLinux:8 | mariadb-server-utils | 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | ALSA-2023:5259 |
| AlmaLinux:8 | mariadb-server-utils | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:9 | mariadb-server-utils | 3:10.5.22-1.el9_2.alma.1 | ALSA-2023:5684 |
| AlmaLinux:8 | mariadb-test | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | ALSA-2023:5683 |
| AlmaLinux:8 | mariadb-test | 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | ALSA-2023:5259 |
| AlmaLinux:9 | mariadb-test | 3:10.5.22-1.el9_2.alma.1 | ALSA-2023:5684 |
| Debian:12 | galera-4 | 26.4.13-1 | DEBIAN-CVE-2023-5157 |
| Debian:13 | galera-4 | 26.4.13-1 | DEBIAN-CVE-2023-5157 |
| Debian:14 | galera-4 | 26.4.13-1 | DEBIAN-CVE-2023-5157 |
| Rocky Linux:8 | Judy | 0:1.0.5-18.module+el8.4.0+431+26aaed18 | RLSA-2023:5259 |
| Rocky Linux:8 | Judy | 0:1.0.5-18.module+el8.4.0+427+adf35707 | RLSA-2023:5683 |
| Rocky Linux:8 | Judy | 0:1.0.5-18.module+el8.4.0+427+adf35707 | RLSA-2023:5259 |
| Rocky Linux:8 | Judy | 0:1.0.5-18.module+el8.10.0+1674+fa55eae9 | RLSA-2023:5259 |
| Rocky Linux:8 | Judy | 0:1.0.5-18.module+el8.10.0+1925+356c22e8 | RLSA-2023:5259 |
| Rocky Linux:8 | galera | 0:26.4.14-1.module+el8.8.0+1490+31c52b1f | RLSA-2023:5683 |
| Rocky Linux:8 | galera | 0:25.3.37-1.module+el8.8.0+1452+2a7eab68 | RLSA-2023:5259 |
| Rocky Linux:8 | mariadb | 3:10.5.22-1.module+el8.8.0+1490+31c52b1f | RLSA-2023:5683 |
| Rocky Linux:8 | mariadb | 3:10.3.39-1.module+el8.8.0+1452+2a7eab68 | RLSA-2023:5259 |
| Ubuntu:22.04:LTS | galera-4 | no fix listed | UBUNTU-CVE-2023-5157 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | see references |
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | see references |
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | see references |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | see references |
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | see references |
| Red Hat | Red Hat Software Collections for Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Software Collections for Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- RHSA-2023:5259 vendor-advisory, x_refsource_REDHAT
- RHSA-2023:5683 vendor-advisory, x_refsource_REDHAT
- RHSA-2023:5684 vendor-advisory, x_refsource_REDHAT
- RHSA-2023:6821 vendor-advisory, x_refsource_REDHAT
- RHSA-2023:6822 vendor-advisory, x_refsource_REDHAT
- RHSA-2023:6883 vendor-advisory, x_refsource_REDHAT
- RHSA-2023:7633 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2023-5157 vdb-entry, x_refsource_REDHAT
- RHBZ#2240246 issue-tracking, x_refsource_REDHAT