Read the docs
TI-2023-04745 Aliases CVE-2023-5157GHSA-6589-j38p-mm8c

Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6

Priority MEDIUM 43CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-400.

Summary

A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02256 83rd percentileScored 2026-11-07
Fix Fixed Red Hat: 7 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatRed Hat Enterprise Linux 8—8080020230814130040.63b34585Patch availableCNA
Red HatRed Hat Enterprise Linux 8—8080020231003163755.63b34585Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—8040020231006044227.522a0ee4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service—8040020231006044227.522a0ee4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions—8040020231006044227.522a0ee4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support—8060020231005052631.ad008a3aPatch availableCNA
Red HatRed Hat Enterprise Linux 9—26.4.14-1.el9_2Patch availableCNA
Red HatRed Hat Enterprise Linux 9—3:10.5.22-1.el9_2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—26.4.14-1.el9_0Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—3:10.5.22-1.el9_0Patch availableCNA
Red HatRed Hat Software Collections for Red Hat Enterprise Linux 7—26.4.14-1.el7Patch availableCNA
Red HatRed Hat Software Collections for Red Hat Enterprise Linux 7—3:10.5.22-1.el7Patch availableCNA
Red HatRed Hat Enterprise Linux 7——Not affectedCNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8080020230814130040.63b34585 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8080020231003163755.63b34585 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 8040020231006044227.522a0ee4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 8040020231006044227.522a0ee4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 8040020231006044227.522a0ee4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support VendorRed Hat Affected — Fixed in 8060020231005052631.ad008a3a Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 26.4.14-1.el9_2 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 3:10.5.22-1.el9_2 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Extended Update Support VendorRed Hat Affected — Fixed in 26.4.14-1.el9_0 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Extended Update Support VendorRed Hat Affected — Fixed in 3:10.5.22-1.el9_0 Patch available CNA
  • Red Hat Software Collections for Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in 26.4.14-1.el7 Patch available CNA
  • Red Hat Software Collections for Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in 3:10.5.22-1.el7 Patch available CNA
  • Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — Not affected CNA

CPE configurations NVD · 27

CPEVersionsRoleVendor
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*before 10.3.36; 10.4.0 to before 10.4.26; 10.5.0 to before 10.5.17; 10.6.0 to before 10.6.9; 10.7.0 to before 10.7.5; 10.8.0 to before 10.8.4VulnerableMariaDB
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*38VulnerableFedoraproject
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*8.0_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:*9.0_aarch64VulnerableRed Hat
  • cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* Versions before 10.3.36; 10.4.0 to before 10.4.26; 10.5.0 to before 10.5.17; 10.6.0 to before 10.6.9; 10.7.0 to before 10.7.5; 10.8.0 to before 10.8.4 Vulnerable ·MariaDB
  • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* Versions 38 Vulnerable ·Fedoraproject
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:* Versions 8.0_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:* Versions 9.0_aarch64 Vulnerable ·Red Hat
Show 17 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:*8.8_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*8.0_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*9.0_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:*9.2_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:*8.6_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:*8.8_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:*9.2_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*8.0_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*9.0_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:*8.8_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:*9.2_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:* Versions 8.8_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:* Versions 8.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* Versions 9.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:* Versions 9.2_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:* Versions 8.6_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:* Versions 8.8_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:* Versions 9.2_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:* Versions 8.0_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:* Versions 9.0_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:* Versions 8.8_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:* Versions 9.2_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat

Remediation

Red Hat 7 advisories

  • RHSA-2023:7633 Released 2023-12-04 · Red Hat rating Important
    rh-mariadb105-galera and rh-mariadb105-mariadb security update
    • Red Hat Software Collections for RHEL Workstation(v. 7) rh-mariadb105-galera-26.4.14-1.el7, rh-mariadb105-mariadb-3:10.5.22-1.el7
    • Red Hat Software Collections for RHEL(v. 7) rh-mariadb105-galera-26.4.14-1.el7, rh-mariadb105-mariadb-3:10.5.22-1.el7
  • RHSA-2023:6883 Released 2023-11-13 · Red Hat rating Important
    galera and mariadb security update
    • Red Hat CodeReady Linux Builder EUS (v.9.0) mariadb-devel-3:10.5.22-1.el9_0, mariadb-embedded-devel-3:10.5.22-1.el9_0, mariadb-test-3:10.5.22-1.el9_0
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) galera-26.4.14-1.el9_0, mariadb-3:10.5.22-1.el9_0, mariadb-backup-3:10.5.22-1.el9_0 +9
  • RHSA-2023:6822 Released 2023-11-08 · Red Hat rating Important
    mariadb:10.5 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.aarch64::mariadb:10.5, Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.ppc64le::mariadb:10.5, Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.s390x::mariadb:10.5 +47
Show 4 more Red Hat advisories
  • RHSA-2023:6821 Released 2023-11-08 · Red Hat rating Important
    mariadb:10.5 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.src::mariadb:10.5, Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.x86_64::mariadb:10.5, galera-26.4.14-1.module+el8.4.0+20291+fd32d29c.src::mariadb:10.5 +16
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.aarch64::mariadb:10.5, Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.ppc64le::mariadb:10.5, Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.s390x::mariadb:10.5 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.src::mariadb:10.5, Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.x86_64::mariadb:10.5, galera-26.4.14-1.module+el8.4.0+20291+fd32d29c.src::mariadb:10.5 +16
  • RHSA-2023:5683 Released 2023-10-12 · Red Hat rating Important
    mariadb:10.5 security update
    • Red Hat Enterprise Linux AppStream (v. 8) Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.aarch64::mariadb:10.5, Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.ppc64le::mariadb:10.5, Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.s390x::mariadb:10.5 +47
  • RHSA-2023:5684 Released 2023-10-12 · Red Hat rating Important
    galera and mariadb security update
    • Red Hat Enterprise Linux AppStream (v. 9) galera-26.4.14-1.el9_2, mariadb-3:10.5.22-1.el9_2, mariadb-backup-3:10.5.22-1.el9_2 +9
    • Red Hat Enterprise Linux CRB (v. 9) mariadb-devel-3:10.5.22-1.el9_2, mariadb-embedded-devel-3:10.5.22-1.el9_2, mariadb-test-3:10.5.22-1.el9_2
  • RHSA-2023:5259 Released 2023-09-19 · Red Hat rating Moderate
    mariadb:10.3 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) Judy-1.0.5-18.module+el8+2765+cfa4f87b.aarch64::mariadb:10.3, Judy-1.0.5-18.module+el8+2765+cfa4f87b.ppc64le::mariadb:10.3, Judy-1.0.5-18.module+el8+2765+cfa4f87b.s390x::mariadb:10.3 +47

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat CodeReady Linux Builder EUS (v.9.0)Fixed RHSA-2023:6883
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2023:5259, RHSA-2023:5683
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:5684
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2023:6821
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2023:6821
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2023:6822
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2023:6883
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2023:6821
Red Hat Enterprise Linux CRB (v. 9)Fixed RHSA-2023:5684
Red Hat Software Collections for RHEL Workstation(v. 7)Fixed RHSA-2023:7633
Red Hat Software Collections for RHEL(v. 7)Fixed RHSA-2023:7633
Not affected: 3 products
  • Red Hat Enterprise Linux 7
  • Red Hat Software Collections for RHEL Workstation(v. 7)
  • Red Hat Software Collections for RHEL(v. 7)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-5157
  2. 2026-10-03 Alias added: GHSA-6589-j38p-mm8c

References

Advisory 9

  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-10530 Code injection in [UNKNOWN] RichFaces KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-23530 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf… KEVCVSS 3.1CRITICAL 9.3
  • TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
See all 1955 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences