Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.
Priority LOW 18CWE-668Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Partial Red Hat: 2 fixed, 2 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.
Summary
Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during a short period of time, another process to establish an otherwise unauthorized connection. This problem has existed since Redis 2.6.0-RC1. This issue has been addressed in Redis versions 7.2.2, 7.0.14 and 6.2.14. Users are advised to upgrade. For users unable to upgrade, it is possible to work around the problem by disabling Unix sockets, starting Redis with a restrictive umask, or storing the Unix socket file in a protected directory.
Why it matters now
EPSS 0.00438 38th percentileScored 2026-11-07
Fix Partial redis (redis): 6.2.14, 7.0.14, 7.2.2Red Hat: 3 advisoriesRed Hat: 2 fixed, 2 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Redis | redis | 2.6.0-rc1 to before 6.2.14; 7.0.0 to before 7.0.14; 7.1.0 to before 7.2.2 | 6.2.14, 7.0.14, 7.2.2 | Patch available | CNA |
- redis VendorRedis Affected 2.6.0-rc1 to before 6.2.14; 7.0.0 to before 7.0.14; 7.1.0 to before 7.2.2 Fixed in 6.2.14, 7.0.14, 7.2.2 Patch available CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:* | 2.6.0 to before 6.2.14; 7.0.0 to before 7.0.14; 7.2.0 to before 7.2.2 | Vulnerable | Redis |
| cpe:2.3:a:redis:redis:2.6.0:rc1:*:*:*:*:*:* | 2.6.0 rc1 | Vulnerable | Redis |
| cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* | 37 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* | 38 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* | 39 | Vulnerable | Fedoraproject |
| cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Debian |
- cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:* Versions 2.6.0 to before 6.2.14; 7.0.0 to before 7.0.14; 7.2.0 to before 7.2.2 Vulnerable ·Redis
- cpe:2.3:a:redis:redis:2.6.0:rc1:*:*:*:*:*:* Versions 2.6.0 rc1 Vulnerable ·Redis
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* Versions 37 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* Versions 38 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* Versions 39 Vulnerable ·Fedoraproject
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
Remediation
- Fix · CNA redis (redis) Fixed in 6.2.14, 7.0.14, 7.2.2
Red Hat 3 advisories
- RHSA-2025:0693 Released 2025-01-27 · Red Hat rating Importantredis security update
- Red Hat Enterprise Linux AppStream (v. 9) redis-6.2.17-1.el9_5, redis-devel-6.2.17-1.el9_5, redis-doc-6.2.17-1.el9_5
- RHSA-2025:0595 Released 2025-01-22 · Red Hat rating Importantredis:6 security update
- Red Hat Enterprise Linux AppStream (v. 8) redis-6.2.17-1.module+el8.10.0+22680+748527fd.aarch64::redis:6, redis-6.2.17-1.module+el8.10.0+22680+748527fd.ppc64le::redis:6, redis-6.2.17-1.module+el8.10.0+22680+748527fd.s390x::redis:6 +7
- RHSA-2024:10869 Released 2024-12-05 · Red Hat rating Moderateredis:7 security update
- Red Hat Enterprise Linux AppStream (v. 9) redis-7.2.6-1.module+el9.5.0+22422+63e067d8.aarch64::redis:7, redis-7.2.6-1.module+el9.5.0+22422+63e067d8.ppc64le::redis:7, redis-7.2.6-1.module+el9.5.0+22422+63e067d8.s390x::redis:7 +7
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Quay 3 | Affected | No fix yet: Fix deferred |
| Red Hat Software Collections | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2025:0595 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2024:10869, RHSA-2025:0693 |
Not affected: 4 products
- Red Hat 3scale API Management Platform 2
- Red Hat Ansible Automation Platform 1.2
- Red Hat Fuse 7
- Red Hat Satellite 6
Timeline
- 2026-10-02 Threatist record created from CVE-2023-45145
References
Advisory 5
- https://github.com/redis/redis/security/advisories/GHSA-ghmp-889m-7cvx
- https://lists.debian.org/debian-lts-announce/2023/10/msg00032.html
- https://lists.fedoraproject.org/archives/list/[email protected]/message/464JPNBWE433ZGYXO3KN72VR3KJPWHAW/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/BNEK2K4IE7MPKRD6H36JXZMJKYS6I5GQ/
- https://security.netapp.com/advisory/ntap-20231116-0014/
More Redis vulnerabilities
- TI-2022-00463 Missing authorization in Debian redis KEVCVSS 3.1CRITICAL 10.0
- TI-2025-31759 Redis Lua Use-After-Free may lead to remote code execution CVSS 3.1CRITICAL 10.0
- TI-2023-18618 Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis CVSS 3.1HIGH 8.8
- TI-2024-20813 Lua library commands may lead to stack overflow and RCE in Redis CVSS 3.1HIGH 8.8
- TI-2022-08647 Heap overflow issue with the Lua cjson library used by Redis CVSS 3.1HIGH 8.8
- TI-2022-08549 Lua scripts can be manipulated to overcome ACL rules in Redis CVSS 3.1HIGH 7.8
Sources
- CVE-2023-45145 · CVE Program
- CVE-2023-45145 · NVD
- FIRST EPSS
- CVE-2023-45145 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences