STIGQter: STIG Summary: MariaDB Enterprise 10.x Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

MariaDB must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

DISA Rule

SV-253693r1043177_rule

Vulnerability Number

V-253693

Group Title

SRG-APP-000142-DB-000094

Rule Version

MADB-10-003500

Severity

CAT II

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Modify the MariaDB configuration file located within /etc/my.cnf.d/ and update the variable port to an acceptable port. Restart MariaDB Enterprise Server.

Example:

[server]
port = 4008

Check Contents

Review system documentation for a list of approved ports.

As the database administrator, run the following command to determine the currently defined port:
MariaDB> SHOW GLOBAL VARIABLES LIKE '%port%';

If the currently defined port is deemed prohibited, this is a finding.

Vulnerability Number

V-253693

Documentable

False

Rule Version

MADB-10-003500

Severity Override Guidance

Review system documentation for a list of approved ports.

As the database administrator, run the following command to determine the currently defined port:
MariaDB> SHOW GLOBAL VARIABLES LIKE '%port%';

If the currently defined port is deemed prohibited, this is a finding.

Check Content Reference

M

Target Key

5475