Lucene search

CVE-2023-28856

🗓️ 18 Apr 2023 21:09:15Reported by [email protected]Type

Redis database vulnerability with `HINCRBYFLOAT` command

Reporter	Title	Published	Views	Family All 75
OSV	CVE-2023-28856	18 Apr 202321:15	–	osv
OSV	BIT-KEYDB-2023-28856	22 Aug 202419:24	–	osv
OSV	redis - security update	21 Apr 202300:00	–	osv
OSV	BIT-redis-2023-28856	6 Mar 202411:04	–	osv
OSV	BIT-VALKEY-2023-28856	22 Aug 202419:41	–	osv
OSV	OPENSUSE-SU-2024:12874-1 redis-7.0.11-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	DLA-3885-1 redis - security update	10 Sep 202400:00	–	osv
OSV	redis vulnerabilities	5 Dec 202316:35	–	osv
OSV	ALSA-2025:0595 Important: redis:6 security update	22 Jan 202500:00	–	osv
OSV	RHSA-2025:0595 Red Hat Security Advisory: redis:6 security update	23 Jan 202510:02	–	osv

Nvd

Node

redis redisRange<6.0.19

redis redisRange6.2.0–6.2.12

redis redisRange7.0.0–7.0.11

Node

debian debian_linuxMatch10.0

Node

fedoraproject fedoraMatch36

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

Source	Link
security	www.security.netapp.com/advisory/ntap-20230601-0007/
lists	www.lists.debian.org/debian-lts-announce/2023/04/msg00023.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/EQ4DJSO4DMR55AWK6OPVJH5UTEB35R2Z/
github	www.github.com/redis/redis/commit/bc7fe41e5857a0854d524e2a63a028e9394d2a5c
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/OQGKMKSQE67L32HE6W5EI2I2YKW5VWHI/
github	www.github.com/redis/redis/security/advisories/GHSA-hjv8-vjf6-wcr6
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/LPUTH7NBQTZDVJWFNUD24ZCS6NDUFYS6/
github	www.github.com/redis/redis/pull/11149

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Apr 2023 21:15Current

6.9Medium risk

Vulners AI Score6.9

CVSS36.5

EPSS0.00543