CVE-2023-31655: High severity ioredis vulnerability
Published May 18, 2023
·Updated
redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
Other sources
redis-7.0.10 was discovered to contain a segmentation violation.
Affected Software
1 affected component
Redis redis=7.0.10
Remediation
Patch Available
Event History
May 18, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2023-31655?
CVE-2023-31655 is a vulnerability in Redis 7.0.10 that leads to a segmentation violation.
2
Is Redis 7.0.10 affected by CVE-2023-31655?
Yes, Redis 7.0.10 is affected by CVE-2023-31655.
3
What is the severity of CVE-2023-31655?
The severity of CVE-2023-31655 is high (7.5).
4
How can I fix CVE-2023-31655?
To fix CVE-2023-31655, update Redis to a version that is not affected by the vulnerability.
5
Where can I find more information about CVE-2023-31655?
You can find more information about CVE-2023-31655 at the following references: [GitHub](https://github.com/RedisLabs/redisraft/issues/608), [NetApp Security Advisory](https://security.netapp.com/advisory/ntap-20230616-0005/)