CVE-2023-36824

🗓️ 11 Jul 2023 16:16:16Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 144 Views

Redis 7.0 prior to 7.0.12 allows heap overflow leading to remote code execution

Reporter	Title	Published	Views	Family All 100
FreeBSD	redis -- heap overflow in COMMAND GETKEYS and ACL evaluation	10 Jul 202300:00	–	freebsd
AlpineLinux	CVE-2023-36824	11 Jul 202316:16	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в redis	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the Redis database management system, related to buffer overflows, allows attackers to execute arbitrary code.	31 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-36824	11 Jul 202320:29	–	circl
CNNVD	Redis 安全漏洞	11 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-36824 Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis	11 Jul 202316:16	–	cvelist
Debian	[SECURITY] [DSA 5610-1] redis security update	29 Jan 202421:15	–	debian
Debian CVE	CVE-2023-36824	11 Jul 202316:16	–	debiancve
Tenable Nessus	Debian dsa-5610 : redis - security update	30 Jan 202400:00	–	nessus

NVD

Vulners

Vulnrichment

Node

redis redisRange7.0.0–7.0.12

Node

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

[
  {
    "vendor": "redis",
    "product": "redis",
    "versions": [
      {
        "version": ">= 7.0.0, < 7.0.12",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/redis/redis/releases/tag/7.0.12
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MIF5MAGYARYUMRFK7PQI7HYXMK2HZE5T/
security	www.security.netapp.com/advisory/ntap-20230814-0009/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/TDNNH2ONMVNBQ6LUIAOAGDNFPKXNST5K/
github	www.github.com/redis/redis/security/advisories/GHSA-4cfx-h9gq-xpx3

10 Apr 2025 20:54Current

8.5High risk

Vulners AI Score8.5

CVSS 3.17.4 - 8.8

EPSS0.88997

SSVC

redis 7.0 7.0.12 heap overflow remote code execution cve-2023-36824 nvd