{"id":"CVE-2023-31655","aliases":["BIT-keydb-2023-31655","BIT-redis-2023-31655","BIT-valkey-2023-31655","EUVD-2023-0224","GHSA-vcmw-cw7q-cpqq","PYSEC-2023-73","UBUNTU-CVE-2023-31655"],"status":"published","title":"redis-7.0.10 was discovered to contain a segmentation violation.","description":"redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01028,"percentile":0.64104,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-05-18T00:00:00Z","modified":"2026-11-10T02:48:52Z","fixes":[{"ecosystem":"Bitnami","package":"keydb","fixed_in":["7.0.11"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"redis","fixed_in":["7.0.11"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"valkey","fixed_in":["7.0.11"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Bitnami","package":"keydb","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.10"},{"fixed":"7.0.11"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"redis","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.10"},{"fixed":"7.0.11"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"valkey","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.10"},{"fixed":"7.0.11"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.6.13-1","2:2.6.16-3","2:2.8.0-1","2:2.8.2-1","2:2.8.4-2","2:2.8.4-2ubuntu0.2","2:2.8.4-2ubuntu0.2+esm1","2:2.8.4-2ubuntu0.2+esm2","2:2.8.4-2ubuntu0.2+esm3","2:2.8.4-2ubuntu0.2+esm4","2:2.8.4-2ubuntu0.2+esm5"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:7.0.15-3","5:7.0.15-3.1","5:8.0.2-3","5:8.0.2-3build1","5:8.0.2-3ubuntu0.25.10.1"]}],"products":[{"vendor":"redis","product":"redis"}],"references":[{"url":"https://github.com/RedisLabs/redisraft/issues/608","tags":["x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","advisory","web","report","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20230616-0005/","tags":["x_transferred","web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31655","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-vcmw-cw7q-cpqq"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/31xxx/CVE-2023-31655.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-31655","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-31655","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-31655","description":"redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2023-05-18T00:00:00Z","modified":"2024-08-02T14:56:35.666Z","updated_at":"2026-11-02T14:35:27.810438Z"}],"euvd":[{"id":"EUVD-2023-0224","description":"redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2023-05-18T00:00:00Z","modified":"2024-08-02T14:56:35Z","updated_at":"2026-11-03T03:50:05.51254Z"}],"ghsa":[{"id":"GHSA-vcmw-cw7q-cpqq","title":"redis-7.0.10 was discovered to contain a segmentation violation.","description":"redis-7.0.10 was discovered to contain a segmentation violation.","status":"published","published":"2023-05-18T21:30:20Z","modified":"2023-11-07T05:05:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T14:54:53.274776Z"}],"nvd":[{"id":"CVE-2023-31655","description":"redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2023-05-18T20:15:09.407Z","modified":"2026-06-17T05:57:20.2Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:08:03.200773Z"}],"osv":[{"id":"UBUNTU-CVE-2023-31655","description":"redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2023-05-18T20:15:00Z","modified":"2026-11-10T02:48:52.94558289Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-10T03:17:25.082775Z"},{"id":"BIT-keydb-2023-31655","description":"redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2024-08-22T19:23:57.657Z","modified":"2026-09-08T08:48:07.127106852Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-redis-2023-31655","description":"redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2024-03-06T11:04:04.601Z","modified":"2026-09-08T08:48:18.981517643Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"BIT-valkey-2023-31655","description":"redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2024-08-22T19:41:30.849Z","modified":"2025-04-03T14:40:37.652Z","updated_at":"2026-11-02T15:28:36.104787Z"},{"id":"CVE-2023-31655","description":"redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.","status":"published","published":"2023-05-18T00:00:00Z","modified":"2026-10-28T02:30:44.13967288Z","updated_at":"2026-11-02T15:44:31.790231Z"},{"id":"PYSEC-2023-73","description":"redis-7.0.10 was discovered to contain a segmentation violation.","status":"withdrawn","published":"2023-05-18T20:15:00Z","modified":"2025-10-09T08:27:09.740005Z","updated_at":"2026-11-02T15:52:53.837392Z"}]}}