Test ID:	1.3.6.1.4.1.25623.1.0.114259
Category:	Databases
Title:	Redis RCE Vulnerability (GHSA-xr47-pcmx-fq2m)
Summary:	Redis is prone to a remote code execution (RCE); vulnerability.
Description:	Summary: Redis is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: In some cases, Redis may incorrectly handle resizing of memory buffers which can result in incorrect accounting of buffer sizes and lead to heap overflow and potential remote code execution. Affected Software/OS: Redis versions starting from 7.0.9 and prior to 7.0.15 and 7.2.x prior to 7.2.4. Solution: Update to version 7.0.15, 7.2.4 or later. CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-41056 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JTGQJ2YLYB24B72I5B5H32YIMPVSWIT/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JTWHPLC3RI67VNRDOIXLDVNC5YMYBMQN/ https://github.com/redis/redis/releases/tag/7.0.15 https://github.com/redis/redis/releases/tag/7.2.4 https://github.com/redis/redis/security/advisories/GHSA-xr47-pcmx-fq2m
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.