Improper Input Validation

🗓️ 26 Apr 2023 13:47:14Reported by Veracode Vulnerability DatabaseType

Improper Input Validation vulnerability in redis software

Reporter	Title	Published	Views	Family All 122
IBM Security Bulletins	Security Bulletin: IBM QRadar Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	29 Jan 202520:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Python, OpenSSH, Golang Go, Minio and Redis may affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift	26 Mar 202503:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Redis may affect IBM Robotic Process Automation for Cloud Pak	2 Jan 202420:21	–	ibm
FreeBSD	redis -- HINCRBYFLOAT can be used to crash a redis-server process	17 Apr 202300:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : redis6, redis6-devel (ALAS2023-2023-164)	3 May 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0014: redis:6 (ALINUX3-SA-2025:0014)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : redis:6 (ALSA-2025:0595)	23 Jan 202500:00	–	nessus
Tenable Nessus	Debian dla-3396 : redis - security update	25 Apr 202300:00	–	nessus
Tenable Nessus	Debian dla-3885 : redis - security update	10 Sep 202400:00	–	nessus
Tenable Nessus	Fedora 36 : redis (2023-04239b5758)	26 Apr 202300:00	–	nessus

Vulners

Node

redis redisMatch5:6.0.9-1debian

AND

redis redisMatch5:6.0.15-1debian

AND

redis redisMatch5:5.0.3-4+deb10u2debian

AND

redis redisMatch5:5.0.3-4+deb10u3debian

AND

redis redisMatch5:6.0.15-1debian

AND

redis redisMatch5:6.0.9-1debian

AND

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-28856
github	www.github.com/redis/redis/commit/bc7fe41e5857a0854d524e2a63a028e9394d2a5c
github	www.github.com/redis/redis/pull/11149
github	www.github.com/redis/redis/security/advisories/GHSA-hjv8-vjf6-wcr6
lists	www.lists.debian.org/debian-lts-announce/2023/04/msg00023.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/EQ4DJSO4DMR55AWK6OPVJH5UTEB35R2Z/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/LPUTH7NBQTZDVJWFNUD24ZCS6NDUFYS6/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/OQGKMKSQE67L32HE6W5EI2I2YKW5VWHI/
security	www.security.netapp.com/advisory/ntap-20230601-0007/

01 Jun 2023 16:22Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.5 - 6.5

EPSS0.00327

SSVC