CVE-2023-28858

🗓️ 26 Mar 2023 19:15:00Reported by ubuntu.comType

redis-py before 4.5.3 leaves a connection open after canceling an async Redis command, and can send response data to the client of an unrelated request in an off-by-one manner.

Reporter	Title	Published	Views	Family All 70
FreeBSD	py39-redis -- can send response data to the client of an unrelated request	26 Mar 202300:00	–	freebsd
FreeBSD	py39-redis -- can send response data to the client of an unrelated request	26 Mar 202300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	26 Apr 202315:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.4.7 fixes multiple security vulnerabilities	26 Mar 202503:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management	25 Sep 202417:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	16 Jun 202315:19	–	ibm
AlpineLinux	CVE-2023-28858	26 Mar 202300:00	–	alpinelinux
AlpineLinux	CVE-2023-28859	26 Mar 202300:00	–	alpinelinux
BDU FSTEC	The vulnerability of the Python Redis library, redis-py, allows a hacker to gain unauthorized access to protected information.	4 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Python Redis library, redis-py, allows a hacker to gain unauthorized access to protected information.	4 Apr 202300:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Filename
Ubuntu	24.04	any	python-redis	python-redis_0_any.deb
Ubuntu	26.04	any	python-redis	python-redis_0_any.deb
Ubuntu	25.10	any	python-redis	python-redis_0_any.deb

Source	Link
github	www.github.com/redis/redis-py/compare/v4.3.5...v4.3.6
github	www.github.com/redis/redis-py/pull/2641
openai	www.openai.com/blog/march-20-chatgpt-outage
github	www.github.com/redis/redis-py/compare/v4.4.2...v4.4.3
github	www.github.com/redis/redis-py/compare/v4.5.2...v4.5.3
cve	www.cve.org/CVERecord

11 Jul 2025 07:54Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.13.7

EPSS0.01034

SSVC