Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

releasealert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2023-22458 — MEDIUM severity vulnerability | Release Alert

CVE-2023-22458

5.5

MEDIUMCVSS v3

Published

January 20, 2023

Affected

14 projects

Assigned by

GitHub

Severity scale

010

Description

Redis is an in-memory database that persists on disk. Authenticated users can issue a `HRANDFIELD` or `ZRANDMEMBER` command with specially crafted arguments to trigger a denial-of-service by crashing Redis with an assertion failure. This problem affects Redis versions 6.2 or newer up to but not including 6.2.9 as well as versions 7.0 up to but not including 7.0.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.

redis/redis

GitHubFor developers, who are building real-time data-driven applications, Redis is the preferred, fastest, and most feature-rich cache, data structure server, and document and vector query engine.

>= 6.2.0, < 6.2.9, >= 7.0.0, < 7.0.8NVD

redis

Docker HubRedis is the world’s fastest data platform for caching, vector search, and NoSQL databases.

>= 6.2.0, < 6.2.9, >= 7.0.0, < 7.0.8NVD

redis

More on this CVE

NVD↗GitHub Advisory↗

NPMA modern, high performance Redis client

>= 6.2.0, < 6.2.9, >= 7.0.0, < 7.0.8NVD

redis

Python Package IndexPython client for Redis database and key-value store

>= 6.2.0, < 6.2.9, >= 7.0.0, < 7.0.8NVD

redis

RubyGems A Ruby client that tries to match Redis' API one-to-one, while still providing an idiomatic interface.

>= 6.2.0, < 6.2.9, >= 7.0.0, < 7.0.8NVD

redis

Crates.ioRedis driver for Rust.

>= 6.2.0, < 6.2.9, >= 7.0.0, < 7.0.8NVD

Redis

NuGet GalleryRedis操作帮助类，支持读写分离，数据库index配置.

>= 6.2.0, < 6.2.9, >= 7.0.0, < 7.0.8NVD

@types/redis

NPMStub TypeScript definitions entry for redis, which provides its own types definitions

>= 6.2.0, < 6.2.9, >= 7.0.0, < 7.0.8NVD

@keyv/redis

NPMRedis storage adapter for Keyv

>= 6.2.0, < 6.2.9, >= 7.0.0, < 7.0.8NVD

eggjs/redis

GitHubredis plugin for egg

>= 6.2.0, < 6.2.9, >= 7.0.0, < 7.0.8NVD

@expo/redis

NPMTODO

>= 6.2.0, < 6.2.9, >= 7.0.0, < 7.0.8NVD

bitnami/redis

Docker HubBitnami Secure Image for redis

>= 6.2.0, < 6.2.9, >= 7.0.0, < 7.0.8NVD

Redis

ChocolateyRedis is the open source, in-memory data store used by millions of developers as a database, cache, streaming engine, and message broker. ### Core capabilities - In-memory data structures: Well-known as a "data structure server", with support for strings, hashes, lists, sets, sorted sets, streams, and more. - Programmability: Server-side scripting with Lua and server-side stored procedures with Redis Functions. - Extensibility: A module API for building custom extensions to Redis in C, C++, and Rust. - Persistence: Keeps the dataset in memory for fast access, but can also persist all writes to permanent storage to survive reboots and system failures. - Clustering: Horizontal scalability with hash-based sharding, scaling to millions of nodes with automatic re-partitioning when growing the cluster. - High availability: Replication with automatic failover for both standalone and clustered deployments. ### Disclaimer You should use it for local development and follow Redis official guidance to deploy it on Linux for production environment. This project doesn't bear any responsibility for any losses caused by using it and is only for learning and exchange purposes.

>= 6.2.0, < 6.2.9, >= 7.0.0, < 7.0.8NVD

opstree/redis

Docker HubOpstee sponsored redis image

>= 6.2.0, < 6.2.9, >= 7.0.0, < 7.0.8NVD