Wind River Support Network

HomeDefectsLIN1018-10199

Acknowledged

LIN1018-10199 : Security Advisory - redis - CVE-2023-22458

Created: Jan 16, 2023 Updated: Apr 15, 2024

Resolved Date: Jan 19, 2023

Found In Version: 10.18.44.1

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

Redis is an in-memory database that persists on disk. Authenticated users can issue a `HRANDFIELD` or `ZRANDMEMBER` command with specially crafted arguments to trigger a denial-of-service by crashing Redis with an assertion failure. This problem affects Redis versions 6.2 or newer up to but not including 6.2.9 as well as versions 7.0 up to but not including 7.0.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.

https://nvd.nist.gov/vuln/detail/CVE-2023-22458