{"id":"CVE-2023-28425","published":"2023-03-20T19:03:37Z","modified":"2025-02-25T14:52:01Z","title":"Specially crafted MSETNX command can lead to denial-of-service","vendor":"redis","product":"redis","tier":"core","eol":null,"affectedVersions":[{"vendor":"redis","product":"redis","versions":[">= 7.0.8, < 7.0.10"]}],"description":{"text":"Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw lies in the MSETNX command of Redis, the in-memory database that persists to disk, in versions 7.0.8 up to but not including 7.0.10. An attacker who already holds valid credentials on the Redis server can issue a specially crafted MSETNX command that triggers a runtime assertion and terminates the server process, causing denial of service; no user interaction is required, but local access to the system is needed.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:22:32Z"},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.58526,"percentile":0.99097,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-77","name":"Improper Neutralization of Special Elements used in a Command"}],"references":[{"url":"https://github.com/redis/redis/security/advisories/GHSA-mvmm-4vq6-vw8c","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/redis/redis/commit/48e0d4788434833b47892fe9f3d91be7687f25c9","tags":["x_refsource_MISC"]},{"url":"https://github.com/redis/redis/releases/tag/7.0.10","tags":["x_refsource_MISC"]},{"url":"https://security.netapp.com/advisory/ntap-20230413-0005/","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-32121","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32121","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-03-20","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-28425","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":23.7,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.82,"detail":"percentile 0.9910"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":3.85,"detail":"base score 5.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}