CVE-2023-22458: Integer overflow in multiple Redis commands can lead to denial-of-service
Redis is an in-memory database that persists on disk. Authenticated users can issue a HRANDFIELD or ZRANDMEMBER command with specially crafted arguments to trigger a denial-of-service by crashing Redis with an assertion failure. This problem affects Redis versions 6.2 or newer up to but not including 6.2.9 as well as versions 7.0 up to but not including 7.0.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Other sources
Redis is vulnerable to a denial of service, caused by an integer overflow. By sending specially crafted HRANDFIELD and ZRANDMEMBER commands, a local authenticated attacker could exploit this vulnerability to cause the application to crash.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-22458?
CVE-2023-22458 is a vulnerability in Redis that allows authenticated users to trigger a denial-of-service by crashing Redis with an assertion failure.
Which versions of Redis are affected by CVE-2023-22458?
Redis versions 6.2 up to but not including 6.2.9, as well as versions 7.0 up to but not including 7.0.8, are affected by CVE-2023-22458.
What is the severity of CVE-2023-22458?
CVE-2023-22458 has a severity rating of 5.5 (medium).
How can authenticated users exploit CVE-2023-22458?
Authenticated users can exploit CVE-2023-22458 by issuing a `HRANDFIELD` or `ZRANDMEMBER` command with specially crafted arguments.
How can I fix CVE-2023-22458?
To fix CVE-2023-22458, update Redis to version 6.2.9 or 7.0.8 or newer.