The vulnerability of the Redis database management system, related to insufficient validation of input data, allows attackers to trigger service failures.

🗓️ 17 Jul 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 9 Views

Redis input validation vulnerability can cause service failures via exploitation.

Reporter	Title	Published	Views	Family All 122
IBM Security Bulletins	Security Bulletin: IBM QRadar Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	29 Jan 202520:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Python, OpenSSH, Golang Go, Minio and Redis may affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift	26 Mar 202503:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Redis may affect IBM Robotic Process Automation for Cloud Pak	2 Jan 202420:21	–	ibm
FreeBSD	redis -- HINCRBYFLOAT can be used to crash a redis-server process	17 Apr 202300:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : redis6, redis6-devel (ALAS2023-2023-164)	3 May 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0014: redis:6 (ALINUX3-SA-2025:0014)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : redis:6 (ALSA-2025:0595)	23 Jan 202500:00	–	nessus
Tenable Nessus	Debian dla-3396 : redis - security update	25 Apr 202300:00	–	nessus
Tenable Nessus	Debian dla-3885 : redis - security update	10 Sep 202400:00	–	nessus
Tenable Nessus	Fedora 36 : redis (2023-04239b5758)	26 Apr 202300:00	–	nessus

Vulners

Node

OR

redis_labs redisRange<6.0.19

redis_labs redisRange6.2.0–6.2.12

redis_labs redisRange7.0.0–7.0.11

fedora fedoraMatch36

fedora fedoraMatch37

fedora fedoraMatch38

Source	Link
github	www.github.com/redis/redis/commit/bc7fe41e5857a0854d524e2a63a028e9394d2a5c
github	www.github.com/redis/redis/pull/11149
lists	www.lists.debian.org/debian-lts-announce/2023/04/msg00023.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/EQ4DJSO4DMR55AWK6OPVJH5UTEB35R2Z/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/LPUTH7NBQTZDVJWFNUD24ZCS6NDUFYS6/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/OQGKMKSQE67L32HE6W5EI2I2YKW5VWHI
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8/
web	www.web.nvd.nist.gov/view/vuln/detail

13 Sep 2023 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 36.5

CVSS 26.8

EPSS0.00963

Redis input validation service failures exploitation