CVE-2023-22458: Integer overflow in multiple Redis commands can lead to denial-of-service

Reference Links

• https://github.com/redis/redis/commit/16f408b1a0121cacd44cbf8aee275d69dc627f02
• https://github.com/redis/redis/releases/tag/6.2.9
• https://github.com/redis/redis/releases/tag/7.0.8
• https://github.com/redis/redis/security/advisories/GHSA-r8w2-2m53-gprj
• https://exchange.xforce.ibmcloud.com/vulnerabilities/245242
• https://www.ibm.com/support/pages/node/7096528 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-7096528

Frequently Asked Questions

• What is CVE-2023-22458?

  CVE-2023-22458 is a vulnerability in Redis that allows authenticated users to trigger a denial-of-service by crashing Redis with an assertion failure.

• Which versions of Redis are affected by CVE-2023-22458?

  Redis versions 6.2 up to but not including 6.2.9, as well as versions 7.0 up to but not including 7.0.8, are affected by CVE-2023-22458.

• What is the severity of CVE-2023-22458?

  CVE-2023-22458 has a severity rating of 5.5 (medium).

• How can authenticated users exploit CVE-2023-22458?

  Authenticated users can exploit CVE-2023-22458 by issuing a `HRANDFIELD` or `ZRANDMEMBER` command with specially crafted arguments.

• How can I fix CVE-2023-22458?

  To fix CVE-2023-22458, update Redis to version 6.2.9 or 7.0.8 or newer.