Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2023-28425
HistoryMar 20, 2023 - 8:15 p.m.

CVE-2023-28425

2023-03-2020:15:00
Alpine Linux Development Team
security.alpinelinux.org
24
redis
msetnx
vulnerability
version 7.0.8
version 7.0.10
authentication
assertion
termination
unix

0.0004 Low

EPSS

Percentile

5.1%

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.

OSVersionArchitecturePackageVersionFilename
Alpine3.14-mainnoarchredis= 6.2.12-r0UNKNOWN
Alpine3.15-mainnoarchredis= 6.2.14-r0UNKNOWN