{"id":"CVE-2023-22458","published":"2023-01-20T18:19:24Z","modified":"2025-03-10T21:21:32Z","title":"Integer overflow in multiple Redis commands can lead to denial-of-service","vendor":"redis","product":"redis","tier":"core","eol":null,"affectedVersions":[{"vendor":"redis","product":"redis","versions":[">= 6.2, < 6.2.9",">= 7.0, < 7.0.8"]}],"description":{"text":"Redis is an in-memory database that persists on disk. Authenticated users can issue a `HRANDFIELD` or `ZRANDMEMBER` command with specially crafted arguments to trigger a denial-of-service by crashing Redis with an assertion failure. This problem affects Redis versions 6.2 or newer up to but not including 6.2.9 as well as versions 7.0 up to but not including 7.0.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.","provenance":"source","from":"CVE.org"},"summary":{"text":"An integer overflow in Redis's HRANDFIELD and ZRANDMEMBER commands lets an attacker crash the Redis in-memory database server with an assertion failure, causing denial of service. Exploitation requires an authenticated user who can issue these commands with specially crafted arguments, with no user interaction needed.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:22:32Z"},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.71984,"percentile":0.99427,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-190","name":"Integer Overflow or Wraparound"}],"references":[{"url":"https://github.com/redis/redis/security/advisories/GHSA-r8w2-2m53-gprj","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/redis/redis/commit/16f408b1a0121cacd44cbf8aee275d69dc627f02","tags":["x_refsource_MISC"]},{"url":"https://github.com/redis/redis/releases/tag/6.2.9","tags":["x_refsource_MISC"]},{"url":"https://github.com/redis/redis/releases/tag/7.0.8","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-26619","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-26619","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-01-20","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-22458","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":23.7,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.89,"detail":"percentile 0.9943"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":3.85,"detail":"base score 5.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}