Lucene search

PRIOn knowledge basePRION:CVE-2023-25155

HistoryMar 02, 2023 - 4:15 a.m.

Integer overflow

2023-03-0204:15:00

PRIOn knowledge base

www.prio-n.com

redis

in-memory database

integer overflow

authenticated users

srandmember

zrandmember

hrandfield

runtime assertion

termination

redis versions

patches

nvd

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.5%

JSON

Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. This problem affects all Redis versions. Patches were released in Redis version(s) 6.0.18, 6.2.11 and 7.0.9.

CPENameOperatorVersion
redisge7.0.0
redislt7.0.9
redisge6.2.0
redislt6.2.11
redislt6.0.18

Name	Operator	Version
redis	ge	7.0.0
redis	lt	7.0.9
redis	ge	6.2.0
redis	lt	6.2.11
redis	lt	6.0.18

References

github.com/redis/redis/commit/2a2a582e7cd99ba3b531336b8bd41df2b566e619

github.com/redis/redis/releases/tag/6.0.18

github.com/redis/redis/releases/tag/6.2.11

github.com/redis/redis/releases/tag/7.0.9

github.com/redis/redis/security/advisories/GHSA-x2r7-j9vw-3w83