CVE-2023-22458CWE-190

Integer overflow in multiple Redis commands can lead to denial-of-service

Medium · published January 20, 2023

Patch now

High probability of exploitation

CVSS calls it medium at 5.5. It sits in the 99.4th percentile for exploit probability.

CVSS v3.1

5.5

EPSS

72%

Percentile

99.4

In the wild

Unconfirmed

What it is

Redis is an in-memory database that persists on disk. Authenticated users can issue a `HRANDFIELD` or `ZRANDMEMBER` command with specially crafted arguments to trigger a denial-of-service by crashing Redis with an assertion failure. This problem affects Redis versions 6.2 or newer up to but not including 6.2.9 as well as versions 7.0 up to but not including 7.0.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The record

Technical detail

CVSS v3.1: 5.5 · MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.71984 · 99.4th percentile
Weakness: CWE-190 · Integer Overflow or Wraparound
Published: 2023-01-20T18:19Z

EPSS history

Timeline

20 JAN 18:19Z
Integer overflow in multiple Redis commands can lead to denial-of-service
cvelistv5