CVE-2023-36824

Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.

• CWE-122
• CWE-131
• CWE-787

• https://github.com/redis/redis/releases/tag/7.0.12Release Notes
• https://github.com/redis/redis/security/advisories/GHSA-4cfx-h9gq-xpx3Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MIF5MAGYARYUMRFK7PQI7HYXMK2HZE5T/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TDNNH2ONMVNBQ6LUIAOAGDNFPKXNST5K/Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230814-0009/Third Party Advisory
• https://github.com/redis/redis/releases/tag/7.0.12Release Notes
• https://github.com/redis/redis/security/advisories/GHSA-4cfx-h9gq-xpx3Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MIF5MAGYARYUMRFK7PQI7HYXMK2HZE5T/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TDNNH2ONMVNBQ6LUIAOAGDNFPKXNST5K/Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230814-0009/Third Party Advisory

Published

Jul 11, 2023

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-36819Knowage is the professional open source suite for modern bus…6.5
• CVE-2023-3682A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-36820Micronaut Security is a security solution for applications. …6.5
• CVE-2023-36821Uptime Kuma, a self-hosted monitoring tool, allows an authen…8.8
• CVE-2023-36822Uptime Kuma, a self-hosted monitoring tool, has a path trave…8.1
• CVE-2023-36823Sanitize is an allowlist-based HTML and CSS sanitizer. Using…6.1
• CVE-2023-36825Orchid is a Laravel package that allows application developm…9.8
• CVE-2023-36826Sentry is an error tracking and performance monitoring platf…6.5
• CVE-2023-36827Fides is an open-source privacy engineering platform for man…7.5
• CVE-2023-36828Statamic is a flat-first, Laravel and Git powered content ma…5.4
• CVE-2023-36829Sentry is an error tracking and performance monitoring platf…5.4
• CVE-2023-3683A vulnerability has been found in LivelyWorks Articart 2.0.1…5.4