What is CVE-2023-5157?

CVE-2023-5157 is a high-severity vulnerability in Mariadb, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2023-09-27.

How severe is CVE-2023-5157?

High severity. CVSS v3 base score is 7.5 out of 10.

Is CVE-2023-5157 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Resource exhaustion in Mariadb

CVE-2023-5157

A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.020 (78.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Mariadb
Fedoraproject Fedora — versions 38
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8 — versions 8080020230814130040.63b34585, 8080020231003163755.63b34585
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support — versions 8040020231006044227.522a0ee4
Red Hat Enterprise Linux 8.4 Telecommunications Update Service — versions 8040020231006044227.522a0ee4
Red Hat Enterprise Linux 8.4 Update Services For Sap Solutions — versions 8040020231006044227.522a0ee4
Red Hat Enterprise Linux 8.6 Extended Update Support — versions 8060020231005052631.ad008a3a
Red Hat Enterprise Linux 9 — versions 0:26.4.14-1.el9_2, 3:10.5.22-1.el9_2
Red Hat Enterprise Linux 9.0 Extended Update Support — versions 0:26.4.14-1.el9_0, 3:10.5.22-1.el9_0

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, Third Party Advisory, vdb-entry)
secalert@redhat.com (x_refsource_REDHAT, issue-tracking, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2023-5157?: CVE-2023-5157 is a high-severity vulnerability in Mariadb, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2023-09-27.
How severe is CVE-2023-5157?: High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2023-5157 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.