CVE-2023-31654
CRITICALDescription
Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the component hiredisAllocFns at /opt/fs/redisraft/deps/hiredis/alloc.c.
Is your site exposed to CVE-2023-31654?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Affected Products
| Vendor | Product |
|---|---|
| redis | redisraft |
References
Frequently Asked Questions
What is CVE-2023-31654? +
How severe is CVE-2023-31654? +
What products are affected by CVE-2023-31654? +
How do I check if I'm vulnerable to CVE-2023-31654? +
Related Vulnerabilities
Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to …
Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run …
Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly …
Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle …
Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in …
Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit …