Lucene search
GoogleOSV:BIT-KEYDB-2023-28425HistoryAug 22, 2024 - 7:24 p.m.
BIT-keydb-2023-28425
2024-08-2219:24:32
Google
osv.dev
3
redis
version 7.0.8
version 7.0.10
authenticated users
msetnx command
runtime assertion
server termination
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
6.4
Confidence
Low
Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.
Related
fedora
fedora
[SECURITY] Fedora 38 Update: redis-7.0.10-1.fc38
2023-03-30 00:22:47
[SECURITY] Fedora 37 Update: redis-7.0.10-1.fc37
2023-03-30 01:21:13
veracode
veracode
Command Injection
2023-04-28 12:57:22
nessus
nessus
Fedora 38 : redis (2023-e3e1f9dd4d)
2023-03-29 00:00:00
Fedora 37 : redis (2023-86068d1187)
2023-03-30 00:00:00
prion
prion
Command injection
2023-03-20 20:15:00
alpinelinux
alpinelinux
CVE-2023-28425
2023-03-20 20:15:00
cbl_mariner
cbl_mariner
CVE-2023-28425 affecting package redis for versions less than 6.2.12-1
2023-05-25 09:38:10
CVE-2023-28425 affecting package redis 6.2.9-1
2023-04-07 04:59:49
openvas
openvas
Fedora: Security Advisory for redis (FEDORA-2023-e3e1f9dd4d)
2023-03-30 00:00:00
Fedora: Security Advisory for redis (FEDORA-2023-86068d1187)
2023-03-31 00:00:00
Redis 7.0.8 - 7.0.9 DoS Vulnerability
2023-03-21 00:00:00
osv
osv
CVE-2023-28425
2023-03-20 20:15:52
BIT-redis-2023-28425
2024-03-06 11:04:24
BIT-valkey-2023-28425
2024-08-22 19:42:01
cve
cve
CVE-2023-28425
2023-03-20 20:15:52
freebsd
freebsd
redis -- specially crafted MSETNX command can lead to denial-of-service
2023-03-20 00:00:00
redhatcve
redhatcve
CVE-2023-28425
2023-03-21 05:13:19
debiancve
debiancve
CVE-2023-28425
2023-03-20 20:15:52
nvd
nvd
CVE-2023-28425
2023-03-20 20:15:52
redos
redos
ROS-20230407-02
2023-04-07 00:00:00
ubuntucve
ubuntucve
CVE-2023-28425
2023-03-20 00:00:00
cvelist
cvelist
gentoo
gentoo
Redis: Multiple Vulnerabilities
2024-08-07 00:00:00
ibm
ibm
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0049
2023-07-14 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
6.4
Confidence
Low
Related for OSV:BIT-KEYDB-2023-28425