{
  "cveId": "CVE-2023-41056",
  "url": "https://patchblox.com/security/cve/CVE-2023-41056",
  "summary": "CVE-2023-41056 is fixed in 8 products on 1 platform, first by DEBIAN-CVE-2023-41056, released January 10, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "redis: Redis is an in-memory database that persists on disk",
  "description": "Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.",
  "published": "2024-01-10T16:15:46Z",
  "severity": "high",
  "cvss": 8.1,
  "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.02561,
  "epssPercentile": 0.85207,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "redis",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5:7.0.15-1~deb12u1",
      "fix": "DEBIAN-CVE-2023-41056",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-41056",
      "released": "2024-01-10T16:15:46Z"
    },
    {
      "platform": "linux",
      "product": "redis",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5:7.0.15-1",
      "fix": "DEBIAN-CVE-2023-41056",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-41056",
      "released": "2024-01-10T16:15:46Z"
    },
    {
      "platform": "linux",
      "product": "redis",
      "release": "Debian 14",
      "fixedVersion": "5:7.0.15-1",
      "fix": "DEBIAN-CVE-2023-41056",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-41056",
      "released": "2024-01-10T16:15:46Z"
    },
    {
      "platform": "linux",
      "product": "redis",
      "release": "RHEL 9",
      "fixedVersion": "0:7.0.12-2.module\u002Bel9.3.0\u002B21263\u002B4e58afe8",
      "fix": "RHEA-2024:1143",
      "url": "https://patchblox.com/security/fix/linux/rhea-2024-1143",
      "released": "2024-03-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "redis-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:7.0.12-2.module\u002Bel9.3.0\u002B21263\u002B4e58afe8",
      "fix": "RHEA-2024:1143",
      "url": "https://patchblox.com/security/fix/linux/rhea-2024-1143",
      "released": "2024-03-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "redis-doc",
      "release": "RHEL 9",
      "fixedVersion": "0:7.0.12-2.module\u002Bel9.3.0\u002B21263\u002B4e58afe8",
      "fix": "RHEA-2024:1143",
      "url": "https://patchblox.com/security/fix/linux/rhea-2024-1143",
      "released": "2024-03-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "redis6",
      "release": "amzn 2023",
      "fixedVersion": "6.2.14-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-516",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-516",
      "released": "2024-02-01T19:12:00Z"
    },
    {
      "platform": "linux",
      "product": "redis6-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.2.14-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-516",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-516",
      "released": "2024-02-01T19:12:00Z"
    },
    {
      "platform": "linux",
      "product": "redis6-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "6.2.14-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-516",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-516",
      "released": "2024-02-01T19:12:00Z"
    },
    {
      "platform": "linux",
      "product": "redis6-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.2.14-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-516",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-516",
      "released": "2024-02-01T19:12:00Z"
    },
    {
      "platform": "linux",
      "product": "redis6-doc",
      "release": "amzn 2023",
      "fixedVersion": "6.2.14-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-516",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-516",
      "released": "2024-02-01T19:12:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}