CVE-2023-41056

Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.

• CWE-190
• CWE-762

• https://github.com/redis/redis/releases/tag/7.0.15Release Notes
• https://github.com/redis/redis/releases/tag/7.2.4Release Notes
• https://github.com/redis/redis/security/advisories/GHSA-xr47-pcmx-fq2mVendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JTGQJ2YLYB24B72I5B5H32YIMPVSWIT/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JTWHPLC3RI67VNRDOIXLDVNC5YMYBMQN/Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20240223-0003/
• https://github.com/redis/redis/releases/tag/7.0.15Release Notes
• https://github.com/redis/redis/releases/tag/7.2.4Release Notes
• https://github.com/redis/redis/security/advisories/GHSA-xr47-pcmx-fq2mVendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JTGQJ2YLYB24B72I5B5H32YIMPVSWIT/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JTWHPLC3RI67VNRDOIXLDVNC5YMYBMQN/Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20240223-0003/

Published

Jan 10, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-41050AccessControl provides a general security framework for use …7.7
• CVE-2023-41051In a typical Virtual Machine Monitor (VMM) there are several…4.7
• CVE-2023-41052Vyper is a Pythonic Smart Contract Language. In affected ver…5.3
• CVE-2023-41053Redis is an in-memory database that persists on disk. Redis …3.3
• CVE-2023-41054LibreY is a fork of LibreX, a framework-less and javascript-…9.1
• CVE-2023-41055LibreY is a fork of LibreX, a framework-less and javascript-…7.5
• CVE-2023-41057hyper-bump-it is a command line tool for updating the versio…5.5
• CVE-2023-41058Parse Server is an open source backend server. In affected v…7.5
• CVE-2023-4106Mattermost fails to check if the requesting user is a guest …6.5
• CVE-2023-41060A type confusion issue was addressed with improved checks. T…8.8
• CVE-2023-41061A validation issue was addressed with improved logic. This i…7.8
• CVE-2023-41063The issue was addressed with improved memory handling. This …7.8