CVE-2023-25155: Integer Overflow in several Redis commands can lead to denial of service.
(CVE-2022-36021) String matching commands (like SCAN or KEYS) with a specially crafted pattern to trigger a denial-of-service attack on Redis, causing it to hang and consume 100% CPU time. https://github.com/gentoo/gentoo/pull/29860
Other sources
Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. This problem affects all Redis versions. Patches were released in Redis version(s) 6.0.18, 6.2.11 and 7.0.9.
— Ubuntu
Redis is vulnerable to a denial of service, caused by an integer overflow. By sending a specially-crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD command, a remote authenticated attacker could exploit this vulnerability to cause a runtime assertion and termination of the Redis server process.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-25155?
CVE-2023-25155 is a vulnerability in Redis, an in-memory database that persists on disk, which can be exploited by authenticated users issuing specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands to trigger an integer overflow, leading to the termination of the Redis server process.
How does CVE-2023-25155 affect Redis?
CVE-2023-25155 affects all versions of Redis up to and including 6.0.18, 6.2.11, and 7.0.9, where authenticated users can trigger an integer overflow by using specific commands.
What is the severity of CVE-2023-25155?
CVE-2023-25155 has a severity rating of 6.5, which is considered medium.
How can the CVE-2023-25155 vulnerability be mitigated?
To mitigate the CVE-2023-25155 vulnerability, users should update their Redis installation to version 6.0.19, 6.2.12, or 7.0.10 or later, as these versions contain the necessary fixes.
Where can I find more information about CVE-2023-25155?
More information about CVE-2023-25155 can be found in the official reference links provided: [GitHub Commit](https://github.com/redis/redis/commit/2a2a582e7cd99ba3b531336b8bd41df2b566e619), [Redis Release - 6.0.18](https://github.com/redis/redis/releases/tag/6.0.18), [Redis Release - 6.2.11](https://github.com/redis/redis/releases/tag/6.2.11).