{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "Judy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.5-18.module_el8.6.0+3139+3c630e87"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "Judy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.5-18.module_el8.6.0+3072+3c630e87"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "galera"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "26.4.14-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "mariadb"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "mariadb-backup"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "mariadb-common"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "mariadb-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "mariadb-embedded"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "mariadb-embedded-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "mariadb-errmsg"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "mariadb-gssapi-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "mariadb-oqgraph-engine"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "mariadb-pam"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "mariadb-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "mariadb-server-galera"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "mariadb-server-utils"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "mariadb-test"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.module_el8.8.0+3620+5d452900"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. \n\nThe following packages have been upgraded to a later upstream version: galera\n(26.4.14), mariadb (10.5.22).\n\nSecurity Fix(es):\n\n* mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6 (CVE-2023-5157)\n* mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc (CVE-2022-32081)\n* mariadb: assertion failure at table-\u003eget_ref_count() == 0 in dict0dict.cc (CVE-2022-32082)\n* mariadb: segmentation fault via the component sub_select (CVE-2022-32084)\n* mariadb: server crash in st_select_lex_unit::exclude_level (CVE-2022-32089)\n* mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091)\n* mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791)\n* mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "id": "ALSA-2023:5683",
  "modified": "2023-10-13T18:15:02Z",
  "published": "2023-10-12T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2023:5683"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32081"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32082"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32084"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32089"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32091"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-38791"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-47015"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-5157"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2106028"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2106030"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2106034"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2106035"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2106042"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2130105"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2163609"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2240246"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/8/ALSA-2023-5683.html"
    }
  ],
  "related": [
    "CVE-2023-5157",
    "CVE-2022-32081",
    "CVE-2022-32082",
    "CVE-2022-32084",
    "CVE-2022-32089",
    "CVE-2022-32091",
    "CVE-2022-38791",
    "CVE-2022-47015"
  ],
  "summary": "Important: mariadb:10.5 security update"
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "galera"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "26.4.14-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "mariadb"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "mariadb-backup"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "mariadb-common"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "mariadb-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "mariadb-embedded"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "mariadb-embedded-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "mariadb-errmsg"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "mariadb-gssapi-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "mariadb-oqgraph-engine"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "mariadb-pam"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "mariadb-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "mariadb-server-galera"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "mariadb-server-utils"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "mariadb-test"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3:10.5.22-1.el9_2.alma.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.\n\nThe following packages have been upgraded to a later upstream version: galera\n(26.4.14), mariadb (10.5.22).\n\nSecurity Fix(es):\n\n* mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6 (CVE-2023-5157)\n* mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc (CVE-2022-32081)\n* mariadb: assertion failure at table-\u003eget_ref_count() == 0 in dict0dict.cc (CVE-2022-32082)\n* mariadb: segmentation fault via the component sub_select (CVE-2022-32084)\n* mariadb: server crash in st_select_lex_unit::exclude_level (CVE-2022-32089)\n* mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091)\n* mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791)\n* mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "id": "ALSA-2023:5684",
  "modified": "2023-10-13T15:18:21Z",
  "published": "2023-10-12T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2023:5684"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32081"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32082"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32084"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32089"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32091"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-38791"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-47015"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-5157"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2106028"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2106030"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2106034"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2106035"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2106042"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2130105"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2163609"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2240246"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/9/ALSA-2023-5684.html"
    }
  ],
  "related": [
    "CVE-2023-5157",
    "CVE-2022-32081",
    "CVE-2022-32082",
    "CVE-2022-32084",
    "CVE-2022-32089",
    "CVE-2022-32091",
    "CVE-2022-38791",
    "CVE-2022-47015"
  ],
  "summary": "Important: galera and mariadb security update"
}

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Red Hat, Inc., \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb, MariaDB Foundation",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "8 (Red Hat Enterprise Linux), 10 (Debian GNU/Linux), - (Red Hat Software Collections), 11 (Debian GNU/Linux), 12 (Debian GNU/Linux), 7.3 (\u0420\u0415\u0414 \u041e\u0421), 9 (Red Hat Enterprise Linux), \u043e\u0442 10.5.0 \u0434\u043e 10.5.17 (MariaDB), \u043e\u0442 10.6.0 \u0434\u043e 10.6.9 (MariaDB), \u043e\u0442 10.7.0 \u0434\u043e 10.7.5 (MariaDB), \u043e\u0442 10.8.0 \u0434\u043e 10.8.4 (MariaDB), \u0434\u043e 10.4.26 (MariaDB)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f MariaDB:\nhttps://jira.mariadb.org/browse/MDEV-25068\nhttps://mariadb.org/mariadb/all-releases/\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2023-5157\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2023-5157\n\n\u0414\u043b\u044f \u0420\u0435\u0434\u041e\u0421: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "02.06.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "05.04.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.10.2023",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2023-06357",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-5157",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Red Hat Enterprise Linux, Debian GNU/Linux, Red Hat Software Collections, \u0420\u0415\u0414 \u041e\u0421 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), MariaDB",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Red Hat, Inc. Red Hat Enterprise Linux 8 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 10 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 11 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 12 , \u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 7.3  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), Red Hat, Inc. Red Hat Enterprise Linux 9 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 OpenVAS \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 MariaDB, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0440\u0430\u0441\u0445\u043e\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u0430 (\u00ab\u0418\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u00bb) (CWE-400), \u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u0437\u0430\u0447\u0438\u0441\u0442\u043a\u0430 \u0438\u043b\u0438 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 (CWE-404)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438  OpenVAS \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 MariaDB \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0440\u0430\u0441\u0445\u043e\u0434\u043e\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u043f\u043e\u0440\u0442\u0430\u043c 3306 \u0438 4567. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://vuldb.com/ru/?id.240279\nhttps://access.redhat.com/security/cve/cve-2023-5157\nhttps://jira.mariadb.org/browse/MDEV-25068\nhttps://security-tracker.debian.org/tracker/CVE-2023-5157\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2240246\nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0421\u0423\u0411\u0414",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-400, CWE-404",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

{
  "assigner": "ENISA",
  "date_reserved": "2026-10-02T07:07:04.019122+00:00",
  "id": "EUVD-2026-293240"
}

{
  "affected": [
    {
      "affectedData": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "mariadb:10.3",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8080020230814130040.63b34585",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "mariadb:10.5",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8080020231003163755.63b34585",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "mariadb:10.5",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8040020231006044227.522a0ee4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "mariadb:10.5",
          "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8040020231006044227.522a0ee4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_tus:8.4::appstream",
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_e4s:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "mariadb:10.5",
          "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8040020231006044227.522a0ee4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "mariadb:10.5",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8060020231005052631.ad008a3a",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "galera",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:26.4.14-1.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "mariadb",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "3:10.5.22-1.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::crb",
            "cpe:/a:redhat:rhel_eus:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "galera",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:26.4.14-1.el9_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.0::crb",
            "cpe:/a:redhat:rhel_eus:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "mariadb",
          "product": "Red Hat Enterprise Linux 9.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "3:10.5.22-1.el9_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_software_collections:3::el7"
          ],
          "defaultStatus": "affected",
          "packageName": "rh-mariadb105-galera",
          "product": "Red Hat Software Collections for Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:26.4.14-1.el7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_software_collections:3::el7"
          ],
          "defaultStatus": "affected",
          "packageName": "rh-mariadb105-mariadb",
          "product": "Red Hat Software Collections for Red Hat Enterprise Linux 7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "3:10.5.22-1.el7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unaffected",
          "packageName": "mariadb",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6E5DE46B-7DD6-4FA2-830A-D559AB2CC70E",
              "versionEndExcluding": "10.3.36",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "76F49D8B-E293-475B-A190-E55F2586EB74",
              "versionEndExcluding": "10.4.26",
              "versionStartIncluding": "10.4.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "144984F5-B5E4-4890-B84C-0BD4EBD1A575",
              "versionEndExcluding": "10.5.17",
              "versionStartIncluding": "10.5.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9397E948-E3C7-4AE0-AB59-D8DF6DC0F85A",
              "versionEndExcluding": "10.6.9",
              "versionStartIncluding": "10.6.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E60C79C-A7E6-4AEF-AD29-38BC63149C60",
              "versionEndExcluding": "10.7.5",
              "versionStartIncluding": "10.7.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB9F7573-E888-42B6-8B57-CAF26300CC16",
              "versionEndExcluding": "10.8.4",
              "versionStartIncluding": "10.8.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F6FB57C-2BC7-487C-96DD-132683AEB35D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C3741B8-851F-475D-B428-523F4F722350",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "62C31522-0A17-4025-B269-855C7F4B45C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DDA3E5A-8754-4C48-9A27-E2415F8A6000",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "3C74F6FA-FA6C-4648-9079-91446E45EE47",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A47EF78-A5B6-4B89-8B74-EEB0647C549F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F7DAD7C-9369-4A87-A1D0-4208D3AF0CDC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:*",
              "matchCriteriaId": "213593D4-EB5A-4A1B-BDF3-3F043C5F6A6C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*",
              "matchCriteriaId": "32AF225E-94C0-4D07-900C-DD868C05F554",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*",
              "matchCriteriaId": "FB056B47-1F45-4CE4-81F6-872F66C24C29",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:*",
              "matchCriteriaId": "2E068ABB-31C2-416E-974A-95E07A2BAB0A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:*",
              "matchCriteriaId": "B758EDC9-6421-422C-899E-A273D2936D8E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:*",
              "matchCriteriaId": "22C65F53-D624-48A9-A9B7-4C78A31E19F9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:*",
              "matchCriteriaId": "26041661-0280-4544-AA0A-BC28FCED4699",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*",
              "matchCriteriaId": "23D471AC-7DCA-4425-AD91-E5D928753A8C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*",
              "matchCriteriaId": "E07C1C58-0E5F-4B56-9B8D-5DE67DB00F79",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:*",
              "matchCriteriaId": "F91F9255-4EE1-43C7-8831-D2B6C228BFD9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:*",
              "matchCriteriaId": "99952557-C766-4B9E-8BF5-DBBA194349FF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E28F226A-CBC7-4A32-BE58-398FA5B42481",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "76C24D94-834A-4E9D-8F73-624AFA99AAA2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F32CA554-F9D7-425B-8F1C-89678507F28C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC10D919-57FD-4725-B8D2-39ECB476902F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "1272DF03-7674-4BD4-8E64-94004B195448",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1CA946D-1665-4874-9D41-C7D963DD1F56",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service."
    },
    {
      "lang": "es",
      "value": "Se encontr\u00f3 una vulnerabilidad en MariaDB. Un escaneo de puertos OpenVAS en los puertos 3306 y 4567 permite que un cliente remoto malicioso provoque una denegaci\u00f3n de servicio."
    }
  ],
  "id": "CVE-2023-5157",
  "lastModified": "2026-06-17T06:47:40.777",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "secalert@redhat.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-5157",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-06-18T14:14:15.541658Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2023-09-27T15:19:41.807",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2023:5259"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2023:5683"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2023:5684"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2023:6821"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2023:6822"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2023:6883"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2023:7633"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/security/cve/CVE-2023-5157"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2240246"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2023:5683"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2023:5684"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2023:6821"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2023:6822"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2023:6883"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2023:7633"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/security/cve/CVE-2023-5157"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2240246"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ],
      "source": "secalert@redhat.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2023-5157"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-400"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-09-27T15:19:41Z",
    "severity": "HIGH"
  },
  "details": "A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.",
  "id": "GHSA-6589-j38p-mm8c",
  "modified": "2025-10-01T15:30:28Z",
  "published": "2023-09-27T15:30:39Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5157"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2023:5259"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2023:5683"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2023:5684"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2023:6821"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2023:6822"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2023:6883"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2023:7633"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2023-5157"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2240246"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2023-5157",
    "id": "GSD-2023-5157"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2023-5157"
      ],
      "details": "A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.",
      "id": "GSD-2023-5157",
      "modified": "2023-12-13T01:20:51.150534Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2023-5157",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Red Hat Enterprise Linux 8",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "8080020231003163755.63b34585",
                                "versionType": "rpm"
                              }
                            ]
                          }
                        },
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected"
                          }
                        },
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "unaffected"
                          }
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "8040020231006044227.522a0ee4",
                                "versionType": "rpm"
                              }
                            ]
                          }
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "8040020231006044227.522a0ee4",
                                "versionType": "rpm"
                              }
                            ]
                          }
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "8040020231006044227.522a0ee4",
                                "versionType": "rpm"
                              }
                            ]
                          }
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Red Hat Enterprise Linux 8.6 Extended Update Support",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "8060020231005052631.ad008a3a",
                                "versionType": "rpm"
                              }
                            ]
                          }
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Red Hat Enterprise Linux 9",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "0:26.4.14-1.el9_2",
                                "versionType": "rpm"
                              }
                            ]
                          }
                        },
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "3:10.5.22-1.el9_2",
                                "versionType": "rpm"
                              }
                            ]
                          }
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Red Hat Enterprise Linux 9.0 Extended Update Support",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "0:26.4.14-1.el9_0",
                                "versionType": "rpm"
                              }
                            ]
                          }
                        },
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "3:10.5.22-1.el9_0",
                                "versionType": "rpm"
                              }
                            ]
                          }
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Red Hat Software Collections for Red Hat Enterprise Linux 7",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "0:26.4.14-1.el7",
                                "versionType": "rpm"
                              }
                            ]
                          }
                        },
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "3:10.5.22-1.el7",
                                "versionType": "rpm"
                              }
                            ]
                          }
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Red Hat Enterprise Linux 7",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "unaffected"
                          }
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Red Hat"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-400",
                "lang": "eng",
                "value": "Uncontrolled Resource Consumption"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://access.redhat.com/errata/RHSA-2023:5683",
            "refsource": "MISC",
            "url": "https://access.redhat.com/errata/RHSA-2023:5683"
          },
          {
            "name": "https://access.redhat.com/errata/RHSA-2023:5684",
            "refsource": "MISC",
            "url": "https://access.redhat.com/errata/RHSA-2023:5684"
          },
          {
            "name": "https://access.redhat.com/errata/RHSA-2023:6821",
            "refsource": "MISC",
            "url": "https://access.redhat.com/errata/RHSA-2023:6821"
          },
          {
            "name": "https://access.redhat.com/errata/RHSA-2023:6822",
            "refsource": "MISC",
            "url": "https://access.redhat.com/errata/RHSA-2023:6822"
          },
          {
            "name": "https://access.redhat.com/errata/RHSA-2023:6883",
            "refsource": "MISC",
            "url": "https://access.redhat.com/errata/RHSA-2023:6883"
          },
          {
            "name": "https://access.redhat.com/errata/RHSA-2023:7633",
            "refsource": "MISC",
            "url": "https://access.redhat.com/errata/RHSA-2023:7633"
          },
          {
            "name": "https://access.redhat.com/security/cve/CVE-2023-5157",
            "refsource": "MISC",
            "url": "https://access.redhat.com/security/cve/CVE-2023-5157"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=2240246",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2240246"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FB28D8FF-695D-44AE-80BF-42AC6AA65081",
                    "versionEndExcluding": "10.4.26",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "144984F5-B5E4-4890-B84C-0BD4EBD1A575",
                    "versionEndExcluding": "10.5.17",
                    "versionStartIncluding": "10.5.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9397E948-E3C7-4AE0-AB59-D8DF6DC0F85A",
                    "versionEndExcluding": "10.6.9",
                    "versionStartIncluding": "10.6.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3E60C79C-A7E6-4AEF-AD29-38BC63149C60",
                    "versionEndExcluding": "10.7.5",
                    "versionStartIncluding": "10.7.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EB9F7573-E888-42B6-8B57-CAF26300CC16",
                    "versionEndExcluding": "10.8.4",
                    "versionStartIncluding": "10.8.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7F6FB57C-2BC7-487C-96DD-132683AEB35D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6C3741B8-851F-475D-B428-523F4F722350",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "62C31522-0A17-4025-B269-855C7F4B45C2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4DDA3E5A-8754-4C48-9A27-E2415F8A6000",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3C74F6FA-FA6C-4648-9079-91446E45EE47",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5A47EF78-A5B6-4B89-8B74-EEB0647C549F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2F7DAD7C-9369-4A87-A1D0-4208D3AF0CDC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:*",
                    "matchCriteriaId": "213593D4-EB5A-4A1B-BDF3-3F043C5F6A6C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*",
                    "matchCriteriaId": "32AF225E-94C0-4D07-900C-DD868C05F554",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FB056B47-1F45-4CE4-81F6-872F66C24C29",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2E068ABB-31C2-416E-974A-95E07A2BAB0A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B758EDC9-6421-422C-899E-A273D2936D8E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:*",
                    "matchCriteriaId": "22C65F53-D624-48A9-A9B7-4C78A31E19F9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:*",
                    "matchCriteriaId": "26041661-0280-4544-AA0A-BC28FCED4699",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*",
                    "matchCriteriaId": "23D471AC-7DCA-4425-AD91-E5D928753A8C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E07C1C58-0E5F-4B56-9B8D-5DE67DB00F79",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F91F9255-4EE1-43C7-8831-D2B6C228BFD9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:*",
                    "matchCriteriaId": "99952557-C766-4B9E-8BF5-DBBA194349FF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E28F226A-CBC7-4A32-BE58-398FA5B42481",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "76C24D94-834A-4E9D-8F73-624AFA99AAA2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F32CA554-F9D7-425B-8F1C-89678507F28C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AC10D919-57FD-4725-B8D2-39ECB476902F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1272DF03-7674-4BD4-8E64-94004B195448",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F1CA946D-1665-4874-9D41-C7D963DD1F56",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service."
          },
          {
            "lang": "es",
            "value": "Se encontr\u00f3 una vulnerabilidad en MariaDB. Un escaneo de puertos OpenVAS en los puertos 3306 y 4567 permite que un cliente remoto malicioso provoque una denegaci\u00f3n de servicio."
          }
        ],
        "id": "CVE-2023-5157",
        "lastModified": "2023-12-22T19:25:31.627",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "secalert@redhat.com",
              "type": "Secondary"
            }
          ]
        },
        "published": "2023-09-27T15:19:41.807",
        "references": [
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:5683"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:5684"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:6821"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:6822"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:6883"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2023:7633"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-5157"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Issue Tracking",
              "Third Party Advisory"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2240246"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-400"
              }
            ],
            "source": "secalert@redhat.com",
            "type": "Secondary"
          }
        ]
      }
    }
  }
}

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "mariadb-errmessage-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-cracklib-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-debuginfo-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-oqgraph-engine-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-debugsource-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-backup-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-devel-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-test-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-embedded-devel-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-common-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-gssapi-server-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-embedded-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-server-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-server-galera-10.3.39-1.oe1.aarch64.rpm"
        ],
        "src": [
          "mariadb-10.3.39-1.oe1.src.rpm"
        ],
        "x86_64": [
          "mariadb-embedded-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-cracklib-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-devel-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-server-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-test-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-errmessage-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-oqgraph-engine-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-gssapi-server-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-embedded-devel-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-debuginfo-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-common-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-server-galera-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-backup-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-debugsource-10.3.39-1.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP1",
        "name": "mariadb",
        "purl": "pkg:rpm/openEuler/mariadb\u0026distro=openEuler-20.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.3.39-1.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "mariadb-embedded-devel-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-backup-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-errmessage-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-server-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-gssapi-server-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-cracklib-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-debugsource-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-embedded-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-test-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-common-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-oqgraph-engine-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-debuginfo-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-server-galera-10.3.39-1.oe1.aarch64.rpm",
          "mariadb-devel-10.3.39-1.oe1.aarch64.rpm"
        ],
        "src": [
          "mariadb-10.3.39-1.oe1.src.rpm"
        ],
        "x86_64": [
          "mariadb-devel-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-common-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-gssapi-server-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-embedded-devel-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-errmessage-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-server-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-backup-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-test-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-debuginfo-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-embedded-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-server-galera-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-oqgraph-engine-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-debugsource-10.3.39-1.oe1.x86_64.rpm",
          "mariadb-cracklib-10.3.39-1.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP3",
        "name": "mariadb",
        "purl": "pkg:rpm/openEuler/mariadb\u0026distro=openEuler-20.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.3.39-1.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "mariadb-errmsg-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-server-utils-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-devel-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-gssapi-server-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-rocksdb-engine-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-debugsource-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-embedded-devel-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-server-galera-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-backup-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-embedded-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-pam-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-config-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-oqgraph-engine-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-server-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-test-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-common-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-debuginfo-10.5.22-1.oe2203.aarch64.rpm",
          "mariadb-common-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-debugsource-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-oqgraph-engine-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-errmsg-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-debuginfo-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-backup-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-pam-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-config-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-server-utils-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-test-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-gssapi-server-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-rocksdb-engine-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-devel-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-server-galera-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-server-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-embedded-devel-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-embedded-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-config-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-common-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-backup-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-devel-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-debugsource-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-debuginfo-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-errmsg-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-embedded-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-oqgraph-engine-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-pam-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-rocksdb-engine-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-test-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-server-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-gssapi-server-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-server-galera-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-embedded-devel-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-server-utils-10.5.22-1.oe2203sp2.aarch64.rpm"
        ],
        "src": [
          "mariadb-10.5.22-1.oe2203.src.rpm",
          "mariadb-10.5.22-1.oe2203sp1.src.rpm",
          "mariadb-10.5.22-1.oe2203sp2.src.rpm"
        ],
        "x86_64": [
          "mariadb-config-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-server-utils-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-server-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-test-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-errmsg-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-oqgraph-engine-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-embedded-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-embedded-devel-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-pam-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-devel-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-backup-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-gssapi-server-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-server-galera-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-debuginfo-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-debugsource-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-common-10.5.22-1.oe2203.x86_64.rpm",
          "mariadb-test-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-embedded-devel-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-gssapi-server-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-embedded-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-debuginfo-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-backup-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-oqgraph-engine-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-config-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-common-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-pam-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-errmsg-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-server-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-server-utils-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-devel-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-server-galera-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-debugsource-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-pam-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-debugsource-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-test-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-debuginfo-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-embedded-devel-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-backup-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-oqgraph-engine-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-embedded-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-gssapi-server-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-devel-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-server-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-common-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-errmsg-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-config-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-server-utils-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-server-galera-10.5.22-1.oe2203sp2.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS",
        "name": "mariadb",
        "purl": "pkg:rpm/openEuler/mariadb\u0026distro=openEuler-22.03-LTS"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.5.22-1.oe2203sp2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "mariadb-common-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-debugsource-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-oqgraph-engine-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-errmsg-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-debuginfo-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-backup-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-pam-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-config-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-server-utils-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-test-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-gssapi-server-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-rocksdb-engine-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-devel-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-server-galera-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-server-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-embedded-devel-10.5.22-1.oe2203sp1.aarch64.rpm",
          "mariadb-embedded-10.5.22-1.oe2203sp1.aarch64.rpm"
        ],
        "src": [
          "mariadb-10.5.22-1.oe2203sp1.src.rpm"
        ],
        "x86_64": [
          "mariadb-test-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-embedded-devel-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-gssapi-server-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-embedded-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-debuginfo-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-backup-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-oqgraph-engine-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-config-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-common-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-pam-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-errmsg-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-server-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-server-utils-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-devel-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-server-galera-10.5.22-1.oe2203sp1.x86_64.rpm",
          "mariadb-debugsource-10.5.22-1.oe2203sp1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP1",
        "name": "mariadb",
        "purl": "pkg:rpm/openEuler/mariadb\u0026distro=openEuler-22.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.5.22-1.oe2203sp1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "mariadb-config-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-common-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-backup-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-devel-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-debugsource-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-debuginfo-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-errmsg-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-embedded-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-oqgraph-engine-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-pam-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-rocksdb-engine-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-test-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-server-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-gssapi-server-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-server-galera-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-embedded-devel-10.5.22-1.oe2203sp2.aarch64.rpm",
          "mariadb-server-utils-10.5.22-1.oe2203sp2.aarch64.rpm"
        ],
        "src": [
          "mariadb-10.5.22-1.oe2203sp2.src.rpm"
        ],
        "x86_64": [
          "mariadb-pam-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-debugsource-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-test-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-debuginfo-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-embedded-devel-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-backup-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-oqgraph-engine-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-embedded-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-gssapi-server-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-devel-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-server-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-common-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-errmsg-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-config-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-server-utils-10.5.22-1.oe2203sp2.x86_64.rpm",
          "mariadb-server-galera-10.5.22-1.oe2203sp2.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP2",
        "name": "mariadb",
        "purl": "pkg:rpm/openEuler/mariadb\u0026distro=openEuler-22.03-LTS-SP2"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.5.22-1.oe2203sp2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "MariaDB turns data into structured information in a wide array of applications, ranging from banking to websites. It is an enhanced, drop-in replacement for MySQL. MariaDB is used because it is fast, scalable and robust, with a rich ecosystem of storage engines, plugins and many other tools make it very versatile for a wide variety of use cases.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.(CVE-2023-5157)",
  "id": "OESA-2023-1750",
  "modified": "2026-08-06T11:06:12Z",
  "published": "2023-10-20T11:06:12Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1750"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5157"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "mariadb security update",
  "upstream": [
    "CVE-2023-5157"
  ]
}