SUSE-SU-2023:2925-1: redis7&distro=openSUSE Leap 15.5
Vulnerability summary
SUSE-SU-2023:2925-1 is a vulnerability in redis7&distro=openSUSE Leap 15.5 with no CVSS score yet.
Advisory lineage
Upstream 6 · Downstream 0 · Related 6Timeline
- 20-07-2023PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for redis7 This update for redis7 fixes the following issues: - CVE-2022-24834: Fixed heap overflow in the cjson and cmsgpack libraries (bsc#1213193). - CVE-2023-28856: Fixed HINCRBYFLOAT invalid key crash (bsc#1210548). - CVE-2022-36021: Fixed integer overflow via Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD (bsc#1208790). - CVE-2023-25155: Fixed Integer Overflow in RAND commands (bsc#1208793). - CVE-2023-28425: Fixed denial-of-service via Specially crafted MSETNX command (bsc#1209528). - CVE-2023-36824: Fixed heap overflow in COMMAND GETKEYS and ACL evaluation (bsc#1213249).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Opensuse1 product
- redis7&distro=openSUSE Leap 15.5< 7.0.8-150500.3.3.1
Suse1 product
- redis7&distro=SUSE Linux Enterprise Module for Server Applications 15 SP5< 7.0.8-150500.3.3.1
2 vendors · 2 products