Remote Code Execution (RCE)

🗓️ 06 Aug 2023 16:37:27Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 31 Views

Redis RCE vulnerability in key handling

Reporter	Title	Published	Views	Family All 99
FreeBSD	redis -- heap overflow in COMMAND GETKEYS and ACL evaluation	10 Jul 202300:00	–	freebsd
AlpineLinux	CVE-2023-36824	11 Jul 202316:16	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in Redis	3 May 202623:59	–	astralinux
BDU FSTEC	The vulnerability of the Redis database management system, related to buffer overflows, allows attackers to execute arbitrary code.	31 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-36824	11 Jul 202320:29	–	circl
CNNVD	Redis 安全漏洞	11 Jul 202300:00	–	cnnvd
CVE	CVE-2023-36824	11 Jul 202316:16	–	cve
Cvelist	CVE-2023-36824 Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis	11 Jul 202316:16	–	cvelist
Debian	[SECURITY] [DSA 5610-1] redis security update	29 Jan 202421:15	–	debian
Debian CVE	CVE-2023-36824	11 Jul 202316:16	–	debiancve

Vulners

Node

redis redisMatch5:6.0.15-1debian

AND

redis redisMatch5:6.0.9-1debian

AND

debian debian_linuxMatch999

OR

redis redisMatch7.0.4-r0os

AND

redis redisMatch6.2.3-r0os

AND

redis redisMatch7.0.3-r0os

AND

redis redisMatch5.0.8-r0os

AND

redis redisMatch6.2.6-r0os

AND

redis redisMatch5.0.7-r0os

AND

redis redisMatch6.2.5-r0os

AND

redis redisMatch7.0.8-r0os

AND

redis redisMatch7.0.10-r0os

AND

redis redisMatch7.0.7-r0os

AND

redis redisMatch7.0.4-r2os

AND

redis redisMatch6.0.1-r0os

AND

redis redisMatch7.0.2-r0os

AND

redis redisMatch5.0.9-r0os

AND

redis redisMatch6.2.1-r0os

AND

redis redisMatch7.0.4-r1os

AND

redis redisMatch7.0.10-r1os

AND

redis redisMatch7.0.11-r0os

AND

redis redisMatch7.0.5-r0os

AND

redis redisMatch7.0.9-r0os

AND

redis redisMatch7.0.0-r0os

AND

redis redisMatch6.2.4-r0os

AND

redis redisMatch6.2.7-r0os

AND

alpinelinux alpine_linuxMatchedge

OR

redis redisMatch7.0.11-r0os

AND

alpinelinux alpine_linuxMatch3.18

OR

redis redisMatch7.0.0-r0os

AND

redis redisMatch6.2.7-r0os

AND

redis redisMatch7.0.4-r0os

AND

redis redisMatch7.0.5-r0os

AND

redis redisMatch6.2.6-r0os

AND

redis redisMatch7.0.4-r1os

AND

redis redisMatch7.0.8-r0os

AND

redis redisMatch7.0.10-r0os

AND

redis redisMatch7.0.9-r0os

AND

redis redisMatch7.0.2-r0os

AND

redis redisMatch7.0.11-r0os

AND

alpinelinux alpine_linuxMatch3.16

OR

redis redisMatch7.0.8-r0os

AND

redis redisMatch7.0.5-r0os

AND

redis redisMatch7.0.9-r0os

AND

redis redisMatch7.0.10-r0os

AND

redis redisMatch7.0.11-r0os

AND

redis redisMatch7.0.7-r0os

AND

alpinelinux alpine_linuxMatch3.17

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-36824
github	www.github.com/redis/redis/releases/tag/7.0.12
github	www.github.com/redis/redis/security/advisories/GHSA-4cfx-h9gq-xpx3
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MIF5MAGYARYUMRFK7PQI7HYXMK2HZE5T/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/TDNNH2ONMVNBQ6LUIAOAGDNFPKXNST5K/
security	www.security.netapp.com/advisory/ntap-20230814-0009/

10 Apr 2025 22:53Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.4 - 8.8

EPSS0.88997

SSVC

remote code execution redis vulnerability key handling arbitrary code