CVE-2013-7458

Name: CVE-2013-7458
Creator: NVD / NIST
Published: 2016-08-10T14:59:00.143+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.49%

Last modified Jun 17, 2026

CVE-2013-7458 is a vulnerability of currently unknown severity. linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.. EPSS estimates a 0.49% chance of exploitation in the next 30 days.

Description

linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.

Metrics

EPSS Probability

0.49%

38.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-200

Affected Software

Vendor	Product	Versions
Redislabs	Redis	<= 3.2.2
Debian	Debian Linux	8.0

References

http://lists.opensuse.org/opensuse-updates/2016-08/msg00029.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-08/msg00030.htmlMailing List, Third Party Advisory
http://www.debian.org/security/2016/dsa-3634Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832460Mailing List, Third Party Advisory
https://github.com/antirez/linenoise/issues/121Patch, Third Party Advisory
https://github.com/antirez/linenoise/pull/122Patch, Third Party Advisory
https://github.com/antirez/redis/blob/3.2/00-RELEASENOTESRelease Notes
https://github.com/antirez/redis/issues/3284Patch, Third Party Advisory
https://github.com/antirez/redis/pull/1418Issue Tracking, Patch, Third Party Advisory
https://github.com/antirez/redis/pull/3322Patch, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-08/msg00029.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-08/msg00030.htmlMailing List, Third Party Advisory
http://www.debian.org/security/2016/dsa-3634Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832460Mailing List, Third Party Advisory
https://github.com/antirez/linenoise/issues/121Patch, Third Party Advisory
https://github.com/antirez/linenoise/pull/122Patch, Third Party Advisory
https://github.com/antirez/redis/blob/3.2/00-RELEASENOTESRelease Notes
https://github.com/antirez/redis/issues/3284Patch, Third Party Advisory
https://github.com/antirez/redis/pull/1418Issue Tracking, Patch, Third Party Advisory
https://github.com/antirez/redis/pull/3322Patch, Third Party Advisory

Timeline

Published: Aug 10, 2016
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2013-7458?

linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.

How severe is CVE-2013-7458?

Severity scoring for CVE-2013-7458 is pending analysis. The EPSS model estimates a 0.49% probability of exploitation in the next 30 days.

How do I fix CVE-2013-7458?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2013

View all 2013CVEs →

Are you affected by CVE-2013-7458?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST