Ubuntu.comUB:CVE-2023-22458CVE-2023-22458
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
5.1%
Redis is an in-memory database that persists on disk. Authenticated users
can issue a HRANDFIELD or ZRANDMEMBER command with specially crafted
arguments to trigger a denial-of-service by crashing Redis with an
assertion failure. This problem affects Redis versions 6.2 or newer up to
but not including 6.2.9 as well as versions 7.0 up to but not including
7.0.8. Users are advised to upgrade. There are no known workarounds for
this vulnerability.
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
5.1%