CVE-2023-25155
- Source
- https://cve.org/CVERecord?id=CVE-2023-25155
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25155.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-25155
- Aliases
-
- BIT-keydb-2023-25155
- BIT-redis-2023-25155
- BIT-valkey-2023-25155
- GHSA-x2r7-j9vw-3w83
- Downstream
- Related
- Published
- 2023-03-02T03:01:36.879Z
- Modified
- 2026-07-09T10:58:26.081427Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Integer Overflow in several Redis commands can lead to denial of service.
- Details
-
Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted
SRANDMEMBER,ZRANDMEMBER, andHRANDFIELDcommands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. This problem affects all Redis versions. Patches were released in Redis version(s) 6.0.18, 6.2.11 and 7.0.9. - Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25155.json", "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-190" ] }- References
-
- https://github.com/redis/redis/releases/tag/6.0.18
- https://github.com/redis/redis/releases/tag/6.2.11
- https://github.com/redis/redis/releases/tag/7.0.9
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25155.json
- https://github.com/redis/redis/security/advisories/GHSA-x2r7-j9vw-3w83
- https://nvd.nist.gov/vuln/detail/CVE-2023-25155
- https://github.com/redis/redis/commit/2a2a582e7cd99ba3b531336b8bd41df2b566e619
Affected packages
Git / github.com/redis/redis
Affected ranges
- Type
- GIT
- Repo
- https://github.com/redis/redis
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixedIntroducedFixedFixed
- Database specific
{ "source": [ "CPE_RANGE", "REFERENCES" ], "cpe": "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "0" }, { "fixed": "6.0.18" }, { "introduced": "6.2.0" }, { "fixed": "6.2.11" }, { "introduced": "7.0.0" }, { "fixed": "7.0.9" } ] }
Affected versions
1.*
1.3.6
2.*
2.2-alpha0
2.2-alpha1
2.2-alpha2
2.2-alpha3
2.2-alpha4
2.2-alpha5
2.2-alpha6
2.2.0-rc1
2.3-alpha0
6.*
6.0-rc1
6.0-rc2
6.0-rc3
6.0-rc4
6.0.0
6.0.1
6.0.10
6.0.11
6.0.12
6.0.13
6.0.14
6.0.15
6.0.16
6.0.17
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
6.0.7
6.0.8
6.0.9
6.2.0
6.2.1
6.2.10
6.2.2
6.2.3
6.2.4
6.2.5
6.2.6
6.2.7
6.2.8
6.2.9
7.*
7.0.0
7.0.1
7.0.2
7.0.3
7.0.4
7.0.5
7.0.6
7.0.7
7.0.8
v1.*
v1.3.10
v1.3.11
v1.3.7
v1.3.8
v1.3.9
v2.*
v2.0.0-rc1
v2.1.1-watch
Other
vm-playpen
Database specific
vanir_signatures_modified
"2026-07-09T10:58:26Z"
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25155.json"
vanir_signatures
[
{
"id": "CVE-2023-25155-26059714",
"digest": {
"line_hashes": [
"233397633113387263380333128132493005614",
"297249636475232444414720420697069909144",
"192491262720804256800156683653322957348",
"323981827400773233856008093971754547535"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/redis/redis/commit/2a2a582e7cd99ba3b531336b8bd41df2b566e619",
"deprecated": false,
"target": {
"file": "src/t_set.c"
}
},
{
"id": "CVE-2023-25155-3f9c6255",
"digest": {
"line_hashes": [
"316126382291076316363364104166368538536",
"291275220492342436605783440481230441017",
"215827571423989882791383329131923305456",
"45019657333175470622628141124169215478",
"161657606240419017322417502645836237751",
"12388704427142053491530467581990851869",
"98041861875930914103094945466487986293",
"267110106297186428566960840541767800365",
"186484567910916600164299437196400975439",
"101077035933776520270488514198679523039"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/redis/redis/commit/2a2a582e7cd99ba3b531336b8bd41df2b566e619",
"deprecated": false,
"target": {
"file": "src/t_hash.c"
}
},
{
"id": "CVE-2023-25155-57a31ff9",
"digest": {
"function_hash": "155854359301080020941959156626392479104",
"length": 793.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/redis/redis/commit/2a2a582e7cd99ba3b531336b8bd41df2b566e619",
"deprecated": false,
"target": {
"function": "hrandfieldCommand",
"file": "src/t_hash.c"
}
},
{
"id": "CVE-2023-25155-6cda6b08",
"digest": {
"function_hash": "35218585095598715204578737963059707435",
"length": 2349.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/redis/redis/commit/2a2a582e7cd99ba3b531336b8bd41df2b566e619",
"deprecated": false,
"target": {
"function": "srandmemberWithCountCommand",
"file": "src/t_set.c"
}
},
{
"id": "CVE-2023-25155-83f71d91",
"digest": {
"function_hash": "133415332476425170607265729583892341887",
"length": 793.0
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/redis/redis/commit/2a2a582e7cd99ba3b531336b8bd41df2b566e619",
"deprecated": false,
"target": {
"function": "zrandmemberCommand",
"file": "src/t_zset.c"
}
},
{
"id": "CVE-2023-25155-cee70947",
"digest": {
"line_hashes": [
"300254959242599039318553219372450530928",
"43072399325027084151847405101383032079",
"37475477714640871587546313729654702685",
"248267414078615091634004363466135950237",
"248368228664088141513127100331604997369",
"6843961658032542631905095034814808129",
"10827992534299731909193345925841420791",
"138212684921325006977100680107387253680",
"77000074221355265286543162429196505110",
"101077035933776520270488514198679523039"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/redis/redis/commit/2a2a582e7cd99ba3b531336b8bd41df2b566e619",
"deprecated": false,
"target": {
"file": "src/t_zset.c"
}
}
]