CVE-2023-28856: `HINCRBYFLOAT` can be used to crash a redis-server process
A vulnerability was found in Redis. This flaw allows authenticated users to use the HINCRBYFLOAT command to create an invalid hash field that may crash Redis on access.
Other sources
CVE-2023-28856:
- The vulnerability allows a remote user to perform a denial of service (DoS) attack. - The vulnerability exists due to insufficient validation of user-supplied input. A remote user can use the HINCRBYFLOAT command to create an invalid hash field that will crash Redis on access.
Vulnerable software versions:
Redis: 7.0.0 - 7.0.10, 6.2.0 - 6.2.11, 6.0.0 - 6.0.18
References:
https://github.com/redis/redis/releases/tag/7.0.11
— Red Hat
Redis is an open source, in-memory database that persists on disk. Authenticated users can use the HINCRBYFLOAT command to create an invalid hash field that will crash Redis on access in affected versions. This issue has been addressed in in versions 7.0.11, 6.2.12, and 6.0.19. Users are advised to upgrade. There are no known workarounds for this issue.
— Ubuntu
Redis is vulnerable to a denial of service, caused by improper input validation. By sending a specially crafted HINCRBYFLOAT command, a local authenticated attacker could exploit this vulnerability to cause the redis-server process to crash.
— IBM
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2023-28856?
CVE-2023-28856 is a vulnerability found in Redis that allows authenticated users to use the HINCRBYFLOAT command to create an invalid hash field that will crash Redis on access.
What is the severity of CVE-2023-28856?
CVE-2023-28856 has a severity rating of 6.5, which is classified as medium.
How can I exploit the CVE-2023-28856 vulnerability?
To exploit CVE-2023-28856, an attacker needs to be an authenticated user and use the HINCRBYFLOAT command to create an invalid hash field that will crash Redis on access.
How can I fix CVE-2023-28856?
To fix CVE-2023-28856, update Redis to version 7.0.11, 6.2.12, or 6.0.19.
Where can I find more information about CVE-2023-28856?
You can find more information about CVE-2023-28856 in the reference links: https://github.com/redis/redis/releases/tag/7.0.11, https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2187526, https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2187527