2023-09-27 16:00:29 +00:00
{
"id" : "CVE-2023-5157" ,
"sourceIdentifier" : "secalert@redhat.com" ,
"published" : "2023-09-27T15:19:41.807" ,
2023-11-09 03:00:25 +00:00
"lastModified" : "2023-11-09T02:15:07.873" ,
2023-11-07 21:03:21 +00:00
"vulnStatus" : "Modified" ,
2023-09-27 16:00:29 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service."
2023-10-02 14:00:28 +00:00
} ,
{
"lang" : "es" ,
"value" : "Se encontr\u00f3 una vulnerabilidad en MariaDB. Un escaneo de puertos OpenVAS en los puertos 3306 y 4567 permite que un cliente remoto malicioso provoque una denegaci\u00f3n de servicio."
2023-09-27 16:00:29 +00:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
2023-10-02 14:00:28 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
} ,
2023-09-27 16:00:29 +00:00
{
2023-11-09 03:00:25 +00:00
"source" : "secalert@redhat.com" ,
2023-09-27 16:00:29 +00:00
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
}
]
} ,
2023-10-02 14:00:28 +00:00
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
2023-10-29 09:06:41 +00:00
"value" : "NVD-CWE-noinfo"
2023-10-02 14:00:28 +00:00
}
]
2023-11-07 21:03:21 +00:00
} ,
{
2023-11-09 03:00:25 +00:00
"source" : "secalert@redhat.com" ,
2023-11-07 21:03:21 +00:00
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-400"
}
]
2023-10-02 14:00:28 +00:00
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.4.26" ,
"matchCriteriaId" : "FB28D8FF-695D-44AE-80BF-42AC6AA65081"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.5.0" ,
"versionEndExcluding" : "10.5.17" ,
"matchCriteriaId" : "144984F5-B5E4-4890-B84C-0BD4EBD1A575"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.6.0" ,
"versionEndExcluding" : "10.6.9" ,
"matchCriteriaId" : "9397E948-E3C7-4AE0-AB59-D8DF6DC0F85A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.7.0" ,
"versionEndExcluding" : "10.7.5" ,
"matchCriteriaId" : "3E60C79C-A7E6-4AEF-AD29-38BC63149C60"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.8.0" ,
"versionEndExcluding" : "10.8.4" ,
"matchCriteriaId" : "EB9F7573-E888-42B6-8B57-CAF26300CC16"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
2023-10-29 09:06:41 +00:00
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2ABBAA9E-CCBA-480B-ABB5-454448D91262"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:9.0_aarch64:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "910C9542-26FC-4635-9351-128727971830"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.2_aarch64:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "09AAD850-019A-46B8-A5A1-845DE048D30A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CA3C5EAE-267F-410F-8AFA-8F5B68A9E617"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "86034E5B-BCDD-4AFD-A460-38E790F608F5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7B3D7389-35C1-48C4-A9EC-2564842723C4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C2ED1251-245C-4390-8964-DDCAD54A8957"
} ,
2023-10-02 14:00:28 +00:00
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
2023-10-29 09:06:41 +00:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "62C31522-0A17-4025-B269-855C7F4B45C2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3C74F6FA-FA6C-4648-9079-91446E45EE47"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5A47EF78-A5B6-4B89-8B74-EEB0647C549F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2F7DAD7C-9369-4A87-A1D0-4208D3AF0CDC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "213593D4-EB5A-4A1B-BDF3-3F043C5F6A6C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "32AF225E-94C0-4D07-900C-DD868C05F554"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2E068ABB-31C2-416E-974A-95E07A2BAB0A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "22C65F53-D624-48A9-A9B7-4C78A31E19F9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "26041661-0280-4544-AA0A-BC28FCED4699"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "23D471AC-7DCA-4425-AD91-E5D928753A8C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E07C1C58-0E5F-4B56-9B8D-5DE67DB00F79"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F91F9255-4EE1-43C7-8831-D2B6C228BFD9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "99952557-C766-4B9E-8BF5-DBBA194349FF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F32CA554-F9D7-425B-8F1C-89678507F28C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F1CA946D-1665-4874-9D41-C7D963DD1F56"
2023-10-02 14:00:28 +00:00
}
]
}
]
}
] ,
2023-09-27 16:00:29 +00:00
"references" : [
2023-10-13 02:00:28 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2023:5683" ,
2023-10-29 09:06:41 +00:00
"source" : "secalert@redhat.com" ,
"tags" : [
"Third Party Advisory"
]
2023-10-13 02:00:28 +00:00
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2023:5684" ,
2023-10-29 09:06:41 +00:00
"source" : "secalert@redhat.com" ,
"tags" : [
"Third Party Advisory"
]
2023-10-13 02:00:28 +00:00
} ,
2023-11-09 03:00:25 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2023:6821" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2023:6822" ,
"source" : "secalert@redhat.com"
} ,
2023-09-27 16:00:29 +00:00
{
"url" : "https://access.redhat.com/security/cve/CVE-2023-5157" ,
2023-10-02 14:00:28 +00:00
"source" : "secalert@redhat.com" ,
"tags" : [
"Third Party Advisory"
]
2023-09-27 16:00:29 +00:00
} ,
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2240246" ,
2023-10-02 14:00:28 +00:00
"source" : "secalert@redhat.com" ,
"tags" : [
"Issue Tracking" ,
"Third Party Advisory"
]
2023-09-27 16:00:29 +00:00
}
]
}