CVE-2023-5157
Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.5EPSS 2.0%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
26 Sep 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Red Hat · Red Hat Enterprise Linux 7Red Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat · Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceRed Hat · Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 8.6 Extended Update SupportRed Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat Enterprise Linux 9.0 Extended Update SupportRed Hat · Red Hat Software Collections for Red Hat Enterprise Linux 7Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
https://access.redhat.com/errata/RHSA-2023:5259https://access.redhat.com/errata/RHSA-2023:5683https://access.redhat.com/errata/RHSA-2023:5684https://access.redhat.com/errata/RHSA-2023:6821https://access.redhat.com/errata/RHSA-2023:6822https://access.redhat.com/errata/RHSA-2023:6883https://access.redhat.com/errata/RHSA-2023:7633https://access.redhat.com/security/cve/CVE-2023-5157https://bugzilla.redhat.com/show_bug.cgi?id=2240246