Every CVE Search/ Get API key

CVE-2023-28425

Specially crafted MSETNX command can lead to denial-of-service

5.5 MediumFix available

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

58.5%Up 58.5 points since Mar 21, 2023
90%50%10%1%

What each source reports

CVE List Score used 5.5

Specially crafted MSETNX command can lead to denial-of-service

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.

Record
CVE-2023-28425
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-77
Updated
2026-11-02
EUVDEUVD-2023-32121 5.5

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.

Record
EUVD-2023-32121
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
NVD 5.5

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.

Record
CVE-2023-28425
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-77, CWE-617
Updated
2026-11-02
OSVAZL-25674 5.5

CVE-2023-28425 affecting package redis for versions less than 6.2.12-1

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.

Record
AZL-25674
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2023-28425 5.5

CVE-2023-28425 does not affect BellSoft software

Record
BELL-CVE-2023-28425
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.5

Specially crafted MSETNX command can lead to denial-of-service

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.

Record
CVE-2023-28425
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-77
Updated
2026-11-02
Show 7 moreShow less
OSVDEBIAN-CVE-2023-28425 5.5

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.

Record
DEBIAN-CVE-2023-28425
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-28425 5.5

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.

Record
UBUNTU-CVE-2023-28425
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBIT-keydb-2023-28425 No score

Specially crafted MSETNX command can lead to denial-of-service

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.

Record
BIT-keydb-2023-28425
Updated
2026-11-02
OSVBIT-redis-2023-28425 No score

Specially crafted MSETNX command can lead to denial-of-service

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.

Record
BIT-redis-2023-28425
Updated
2026-11-02
OSVBIT-valkey-2023-28425 No score

Specially crafted MSETNX command can lead to denial-of-service

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.

Record
BIT-valkey-2023-28425
Updated
2026-11-02
OSVopenSUSE-SU-2024:12874-1 No score

redis-7.0.11-1.1 on GA media

These are all security issues fixed in the redis-7.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12874-1
Updated
2026-11-02
OSVSUSE-SU-2023:2925-1 No score

Security update for redis7

This update for redis7 fixes the following issues:

  • CVE-2022-24834: Fixed heap overflow in the cjson and cmsgpack libraries (bsc#1213193).
  • CVE-2023-28856: Fixed HINCRBYFLOAT invalid key crash (bsc#1210548).
  • CVE-2022-36021: Fixed integer overflow via Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD (bsc#1208790).
  • CVE-2023-25155: Fixed Integer Overflow in RAND commands (bsc#1208793).
  • CVE-2023-28425: Fixed denial-of-service via Specially crafted MSETNX command (bsc#1209528).
  • CVE-2023-36824: Fixed heap overflow in COMMAND GETKEYS and ACL evaluation (bsc#1213249).
Record
SUSE-SU-2023:2925-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
redis
Azure Linux:2
 before 6.2.12-1
6.2.12-1
keydb
Bitnami
 7.0.8 up to 7.0.10
7.0.10
redis
Bitnami
 7.0.8 up to 7.0.10
7.0.10
valkey
Bitnami
 7.0.8 up to 7.0.10
7.0.10
redis
Debian:12
 before 5:7.0.10-1
5:7.0.10-1
redis
Debian:13
 before 5:7.0.10-1
5:7.0.10-1
redis
Debian:14
 before 5:7.0.10-1
5:7.0.10-1
redis7
SUSE:Linux Enterprise Module for Server Applications 15 SP5
From an advisory covering 6 CVEs
 before 7.0.8-150500.3.3.1
7.0.8-150500.3.3.1
redis7
openSUSE:Leap 15.5
From an advisory covering 6 CVEs
 before 7.0.8-150500.3.3.1
7.0.8-150500.3.3.1
redis
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 7.0.11-1.1
7.0.11-1.1

History

History
RecordedChangedSources
affected, facts
affected
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-28425 is a medium vulnerability (CVSS 5.5) in Redis, published March 20, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 58.5%, the 99th percentile. Fixed in redis 6.2.12-1.

References

Show 17 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open