cbcvebase.
CVE-2023-25155
published 2023-03-02

CVE-2023-25155: Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SRANDMEMBER`, `ZRANDMEMBER`, and `HRANDFIELD` commands can…

PriorityP335medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
0.90%
56.0th percentile
Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SRANDMEMBER`, `ZRANDMEMBER`, and `HRANDFIELD` commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. This problem affects all Redis versions. Patches were released in Redis version(s) 6.0.18, 6.2.11 and 7.0.9.

Affected

17 ranges
VendorProductVersion rangeFixed in
debianredis< redis 5:7.0.9-1 (bookworm)redis 5:7.0.9-1 (bookworm)
msrccbl2_redis_6.2.11-1_on_cbl_mariner_2.0
msrccm1_redis_6.2.11-1_on_cbl_mariner_1.0
redisredis< 6.0.186.0.18
redisredis
redisredis
redisredis>= 0 < 5:6.0.16-1+deb11u35:6.0.16-1+deb11u3
redisredis>= 0 < 5:7.0.9-15:7.0.9-1
redisredis>= 0 < 5:7.0.9-15:7.0.9-1
redisredis>= 0 < 5:7.0.9-15:7.0.9-1
redisredis>= 0 < 2:2.8.4-2ubuntu0.2+esm32:2.8.4-2ubuntu0.2+esm3
redisredis>= 0 < 2:3.0.6-1ubuntu0.4+esm22:3.0.6-1ubuntu0.4+esm2
redisredis>= 0 < 5:4.0.9-1ubuntu0.2+esm45:4.0.9-1ubuntu0.2+esm4
redisredis>= 0 < 5:5.0.7-2ubuntu0.1+esm25:5.0.7-2ubuntu0.1+esm2
redisredis>= 0 < 5:6.0.16-1ubuntu1+esm15:6.0.16-1ubuntu1+esm1
redisredis>= 6.2.0 < 6.2.116.2.11
redisredis>= 7.0.0 < 7.0.97.0.9

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv8.8HIGH
vendor_ubuntu7.0HIGH
vendor_msrc6.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.