Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-28856 EUVD-2023-32480

`HINCRBYFLOAT` can be used to crash a redis-server process

Published Apr 18, 2023 · Updated Feb 13, 2025 · Assigned by GitHub_M

Vendor: Redis Product: Redis Package: redis Package: redis Package: redis Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

Redis is an open source, in-memory database that persists on disk. Authenticated users can use the `HINCRBYFLOAT` command to create an invalid hash field that will crash Redis on access in affected versions. This issue has been addressed in in versions 7.0.11, 6.2.12, and 6.0.19. Users are advised to upgrade. There are no known workarounds for this issue.

Affected products

VendorProductAffectedFixed
redis redis >= 7.0.0, < 7.0.11, >= 6.2.0, < 6.2.12, < 6.0.19 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 redis 5:7.0.11-1 —
Debian 13 redis 5:7.0.11-1 —
Debian 12 redis 5:7.0.11-1 —
Debian 11 redis 5:6.0.16-1+deb11u3 DLA-3885-1
Debian 10 redis 5:5.0.14-1+deb10u4 DLA-3396-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu Pro 22.04 LTS redis 5:6.0.16-1ubuntu1+esm1 USN-6531-1
Ubuntu Pro 20.04 LTS redis 5:5.0.7-2ubuntu0.1+esm2 USN-6531-1
Ubuntu Pro 18.04 LTS redis 5:4.0.9-1ubuntu0.2+esm4 USN-6531-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS redis 2:3.0.6-1ubuntu0.4+esm2 USN-6531-1
Ubuntu Pro 14.04 LTS redis 2:2.8.4-2ubuntu0.2+esm3 USN-6531-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 8 redis +2 6.2.17-1.module+el8.10.0+22680+748527fd RHSA-2025:0595

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 redis +2 6.2.17-1.module_el8.10.0+3946+3de613d5 ALSA-2025:0595

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 redis 6.2.17-1.module+el8.10.0+1923+5b85c6a7 RLSA-2025:0595

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP5 redis7 7.0.8-150500.3.3.1 SUSE-SU-2023:2925-1
SLES 15 SP4 redis 6.2.6-150400.3.19.1 SUSE-SU-2023:2122-1
SLES 15 SP3 redis 6.0.14-150200.6.26.1 SUSE-SU-2023:3407-1
SLES 15 SP2 redis 6.0.14-150200.6.26.1 SUSE-SU-2023:3407-1
Show 9 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP3 redis 6.0.14-150200.6.26.1 SUSE-SU-2023:3407-1
SLES for SAP 15 SP2 redis 6.0.14-150200.6.26.1 SUSE-SU-2023:3407-1
SLE Real Time 15 SP3 redis 6.0.14-150200.6.26.1 SUSE-SU-2023:3407-1
SLE HPC 15 SP3 redis 6.0.14-150200.6.26.1 SUSE-SU-2023:3407-1
SLE HPC 15 SP2 redis 6.0.14-150200.6.26.1 SUSE-SU-2023:3407-1
SUSE Manager Server 4.2 redis 6.0.14-150200.6.26.1 SUSE-SU-2023:3407-1
SUSE Manager Proxy 4.2 redis 6.0.14-150200.6.26.1 SUSE-SU-2023:3407-1
SUSE Enterprise Storage 7.1 redis 6.0.14-150200.6.26.1 SUSE-SU-2023:3407-1
SUSE Enterprise Storage 7 redis 6.0.14-150200.6.26.1 SUSE-SU-2023:3407-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed redis 7.0.11-1.1 openSUSE-SU-2024:12874-1
openSUSE Leap 15.5 redis7 7.0.8-150500.3.3.1 SUSE-SU-2023:2925-1
openSUSE Leap 15.4 redis 6.2.6-150400.3.19.1 SUSE-SU-2023:2122-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 redis6 +2 6.2.12-1.amzn2023.0.1 ALAS2023-2023-164

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) redis 6.2.12-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 redis +2 6.2.17-1.0.1.module+el8.10.0+90491+f9002f77 ELSA-2025-0595

Advisories 14

References