CVE-2023-25155

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SRANDMEMBER`, `ZRANDMEMBER`, and `HRANDFIELD` commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. This problem affects all Redis versions. Patches were released in Redis version(s) 6.0.18, 6.2.11 and 7.0.9.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published: Mar 2, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-251569.8Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt bru CVE-2023-251579.8GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support CVE-2023-251589.8GeoTools is an open source Java library that provides tools for geospatial data. GeoTools includes support for OGC Filter expression languag CVE-2023-251595.3Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Office is a document collabor CVE-2023-25165.4Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7.CVE-2023-251605.3Nextcloud Mail is an email app for the Nextcloud home server platform. Prior to versions 2.2.1, 1.14.5, 1.12.9, and 1.11.8, an attacker can CVE-2023-251615.3Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise S CVE-2023-251625.3Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to 24.0.8 and 23.0.1 CVE-2023-251636.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v2.6.0-rc1 have an output sa CVE-2023-251647.5Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tinacms/cli >= 1.0.0 && CVE-2023-251654.3Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in He CVE-2023-251666.5formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provided strings to formula's parser might lead to poly