CVE-2023-41056
Fixed in a distro release EPSS 3%CVSS 8.1
Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.
Products: Redis
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine:v3.16 | redis | 7.0.15-r0 |
| Alpine:v3.17 | redis | 7.0.15-r0 |
| Alpine:v3.18 | redis | 7.0.15-r0 |
| Alpine:v3.19 | redis | 7.2.4-r0 |
| Chainguard | redis-6.2 | 0 |
| Chainguard | redis-6.2-bitnami-compat | 0 |
| Chainguard | redis-6.2-iamguarded-compat | 0 |
| Chainguard | redis-7.0 | 7.0.15-r0 |
| Chainguard | redis-7.0-bitnami-compat | 7.0.15-r0 |
| Chainguard | redis-7.2 | 7.2.4-r0 |
| Chainguard | redis-7.2-bitnami-compat | 7.2.4-r0 |
| Chainguard | redis-7.2-iamguarded-compat | 7.2.4-r0 |
| Chainguard | redis-benchmark-6.2 | 0 |
| Chainguard | redis-benchmark-7.0 | 7.0.15-r0 |
| Chainguard | redis-benchmark-7.2 | 7.2.4-r0 |
| Chainguard | redis-check-aof-6.2 | 0 |
| Chainguard | redis-check-aof-7.0 | 7.0.15-r0 |
| Chainguard | redis-check-rdb-6.2 | 0 |
| Chainguard | redis-check-rdb-7.0 | 7.0.15-r0 |
| Chainguard | redis-cli-6.2 | 0 |
| Chainguard | redis-cli-7.0 | 7.0.15-r0 |
| Chainguard | redis-cli-7.2 | 7.2.4-r0 |
| Chainguard | redis-cluster-6.2-bitnami-compat | 0 |
| Chainguard | redis-cluster-6.2-iamguarded-compat | 0 |
| Chainguard | redis-cluster-7.0-bitnami-compat | 7.0.15-r0 |
| Chainguard | redis-cluster-7.2-bitnami-compat | 7.2.4-r0 |
| Chainguard | redis-cluster-7.2-iamguarded-compat | 7.2.4-r0 |
| Chainguard | redis-sentinel-6.2 | 0 |
| Chainguard | redis-sentinel-6.2-bitnami-compat | 0 |
| Chainguard | redis-sentinel-6.2-iamguarded-compat | 0 |
| Chainguard | redis-sentinel-7.0 | 7.0.15-r0 |
| Chainguard | redis-sentinel-7.0-bitnami-compat | 7.0.15-r0 |
| Chainguard | redis-sentinel-7.2-bitnami-compat | 7.2.4-r0 |
| Chainguard | redis-sentinel-7.2-iamguarded-compat | 7.2.4-r0 |
| Debian:12 | redis | 5:7.0.15-1~deb12u1 |
| Debian:13 | redis | 5:7.0.15-1 |
| Debian:14 | redis | 5:7.0.15-1 |
| Red Hat:enterprise_linux:9 | redis | 0:7.0.12-2.module+el9.3.0+21263+4e58afe8 |
| Red Hat:enterprise_linux:9 | redis-debuginfo | 0:7.0.12-2.module+el9.3.0+21263+4e58afe8 |
| Red Hat:enterprise_linux:9 | redis-debugsource | 0:7.0.12-2.module+el9.3.0+21263+4e58afe8 |
| Red Hat:enterprise_linux:9 | redis-devel | 0:7.0.12-2.module+el9.3.0+21263+4e58afe8 |
| Red Hat:enterprise_linux:9 | redis-doc | 0:7.0.12-2.module+el9.3.0+21263+4e58afe8 |
| Ubuntu:24.04:LTS | redis | 5:7.0.15-1 |
| Wolfi | redis-6.2 | 0 |
| Wolfi | redis-6.2-bitnami-compat | 0 |
| Wolfi | redis-7.0 | 7.0.15-r0 |
| Wolfi | redis-7.0-bitnami-compat | 7.0.15-r0 |
| Wolfi | redis-7.2 | 7.2.4-r0 |
| Wolfi | redis-7.2-bitnami-compat | 7.2.4-r0 |
| Wolfi | redis-benchmark-6.2 | 0 |
| Wolfi | redis-benchmark-7.0 | 7.0.15-r0 |
| Wolfi | redis-benchmark-7.2 | 7.2.4-r0 |
| Wolfi | redis-check-aof-6.2 | 0 |
| Wolfi | redis-check-aof-7.0 | 7.0.15-r0 |
| Wolfi | redis-check-rdb-6.2 | 0 |
| Wolfi | redis-check-rdb-7.0 | 7.0.15-r0 |
| Wolfi | redis-cli-6.2 | 0 |
| Wolfi | redis-cli-7.0 | 7.0.15-r0 |
| Wolfi | redis-cli-7.2 | 7.2.4-r0 |
| Wolfi | redis-cluster-6.2-bitnami-compat | 0 |
| Wolfi | redis-cluster-7.0-bitnami-compat | 7.0.15-r0 |
| Wolfi | redis-cluster-7.2-bitnami-compat | 7.2.4-r0 |
| Wolfi | redis-sentinel-6.2 | 0 |
| Wolfi | redis-sentinel-6.2-bitnami-compat | 0 |
| Wolfi | redis-sentinel-7.0 | 7.0.15-r0 |
| Wolfi | redis-sentinel-7.0-bitnami-compat | 7.0.15-r0 |
| Wolfi | redis-sentinel-7.2-bitnami-compat | 7.2.4-r0 |
| openSUSE:Tumbleweed | redis | 7.2.4-1.1 |