High severity8.1NVD Advisory· Published Jan 10, 2024· Updated Jun 17, 2026

CVE-2023-41056

Description

Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Redis/Redis3 versions
cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*range: >=7.0.9,<7.0.15
- (no CPE)range: before 7.0.15 and 7.2.4
- (no CPE)range: >= 7.0.9, < 7.0.15
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
osv-coords58 versions
pkg:apk/chainguard/redis-6.2 pkg:apk/chainguard/redis-6.2-bitnami-compat pkg:apk/chainguard/redis-6.2-iamguarded-compat pkg:apk/chainguard/redis-7.0 pkg:apk/chainguard/redis-7.0-bitnami-compat pkg:apk/chainguard/redis-7.2 pkg:apk/chainguard/redis-7.2-bitnami-compat pkg:apk/chainguard/redis-7.2-iamguarded-compat pkg:apk/chainguard/redis-benchmark-6.2 pkg:apk/chainguard/redis-benchmark-7.0 pkg:apk/chainguard/redis-benchmark-7.2 pkg:apk/chainguard/redis-check-aof-6.2 pkg:apk/chainguard/redis-check-aof-7.0 pkg:apk/chainguard/redis-check-rdb-6.2 pkg:apk/chainguard/redis-check-rdb-7.0 pkg:apk/chainguard/redis-cli-6.2 pkg:apk/chainguard/redis-cli-7.0 pkg:apk/chainguard/redis-cli-7.2 pkg:apk/chainguard/redis-cluster-6.2-bitnami-compat pkg:apk/chainguard/redis-cluster-6.2-iamguarded-compat pkg:apk/chainguard/redis-cluster-7.0-bitnami-compat pkg:apk/chainguard/redis-cluster-7.2-bitnami-compat pkg:apk/chainguard/redis-cluster-7.2-iamguarded-compat pkg:apk/chainguard/redis-sentinel-6.2 pkg:apk/chainguard/redis-sentinel-6.2-bitnami-compat pkg:apk/chainguard/redis-sentinel-6.2-iamguarded-compat pkg:apk/chainguard/redis-sentinel-7.0 pkg:apk/chainguard/redis-sentinel-7.0-bitnami-compat pkg:apk/chainguard/redis-sentinel-7.2-bitnami-compat pkg:apk/chainguard/redis-sentinel-7.2-iamguarded-compat pkg:apk/wolfi/redis-6.2 pkg:apk/wolfi/redis-6.2-bitnami-compat pkg:apk/wolfi/redis-7.0 pkg:apk/wolfi/redis-7.0-bitnami-compat pkg:apk/wolfi/redis-7.2 pkg:apk/wolfi/redis-7.2-bitnami-compat pkg:apk/wolfi/redis-benchmark-6.2 pkg:apk/wolfi/redis-benchmark-7.0 pkg:apk/wolfi/redis-benchmark-7.2 pkg:apk/wolfi/redis-check-aof-6.2 pkg:apk/wolfi/redis-check-aof-7.0 pkg:apk/wolfi/redis-check-rdb-6.2 pkg:apk/wolfi/redis-check-rdb-7.0 pkg:apk/wolfi/redis-cli-6.2 pkg:apk/wolfi/redis-cli-7.0 pkg:apk/wolfi/redis-cli-7.2 pkg:apk/wolfi/redis-cluster-6.2-bitnami-compat pkg:apk/wolfi/redis-cluster-7.0-bitnami-compat pkg:apk/wolfi/redis-cluster-7.2-bitnami-compat pkg:apk/wolfi/redis-sentinel-6.2 pkg:apk/wolfi/redis-sentinel-6.2-bitnami-compat pkg:apk/wolfi/redis-sentinel-7.0 pkg:apk/wolfi/redis-sentinel-7.0-bitnami-compat pkg:apk/wolfi/redis-sentinel-7.2-bitnami-compat pkg:bitnami/keydb pkg:bitnami/redis pkg:bitnami/valkey pkg:rpm/opensuse/redis&distro=openSUSE%20Tumbleweed
< 0+ 57 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: < 0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: < 0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: < 0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: < 0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: < 0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 7.0.15-r0
- (no CPE)range: < 7.2.4-r0
- (no CPE)range: >= 7.0.9, < 7.0.15
- (no CPE)range: >= 7.0.9, < 7.0.15
- (no CPE)range: >= 7.0.9, < 7.0.15
- (no CPE)range: < 7.2.4-1.1

Patches

Vulnerability mechanics

References

github.com/redis/redis/security/advisories/GHSA-xr47-pcmx-fq2mnvdVendor Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/3JTGQJ2YLYB24B72I5B5H32YIMPVSWIT/nvdMailing ListThird Party Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/JTWHPLC3RI67VNRDOIXLDVNC5YMYBMQN/nvdMailing ListThird Party Advisory
github.com/redis/redis/releases/tag/7.0.15nvdRelease Notes
github.com/redis/redis/releases/tag/7.2.4nvdRelease Notes
security.netapp.com/advisory/ntap-20240223-0003/nvd

News mentions

GitLab Critical Security Release: 16.8.1, 16.7.4, 16.6.6, 16.5.8
GitLab Security Releases · Jan 25, 2024

cvss	0.526
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000