Log in Start free

Vulnerability · Published Sep 6, 2023 · Assigned by GitHub_M

CVE-2023-41053Redis SORT_RO may bypass ACL configuration

Low 3.3

In plain English

A low-severity privilege mismanagement in redis from redis. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.3Low
Exploit odds (30 days)0.3%top 78.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been fixed in Redis 7.0.13 and 7.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9redis7.2.6-1.module_el9.5.0+130+36ae7635ALSA-2024:10869
AlmaLinux:9redis-devel7.2.6-1.module_el9.5.0+130+36ae7635ALSA-2024:10869
AlmaLinux:9redis-doc7.2.6-1.module_el9.5.0+130+36ae7635ALSA-2024:10869
Alpine:v3.20redis7.2.1-r0ALPINE-CVE-2023-41053
Alpine:v3.21redis7.2.1-r0ALPINE-CVE-2023-41053
Alpine:v3.22redis7.2.1-r0ALPINE-CVE-2023-41053
Alpine:v3.23redis7.2.1-r0ALPINE-CVE-2023-41053
Alpine:v3.24redis7.2.1-r0ALPINE-CVE-2023-41053
Debian:12redis5:7.0.15-1~deb12u1DEBIAN-CVE-2023-41053
Debian:12redis5:7.0.15-1~deb12u1DSA-5610-1
Debian:13redis5:7.0.13-1DEBIAN-CVE-2023-41053
Debian:14redis5:7.0.13-1DEBIAN-CVE-2023-41053
Ubuntu:24.04:LTSredis5:7.0.14-1UBUNTU-CVE-2023-41053

Affected products (as reported)

VendorProductVersions
redis redis >= 7.0.0, < 7.0.13>= 7.1.0, < 7.2.1

Weakness: CWE-269 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References