CVE-2023-36824
HighIn Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution.
Published Jul 11, 2023 · Updated Sep 8, 2026 · Also known as ALPINE-CVE-2023-36824, BIT-keydb-2023-36824, BIT-redis-2023-36824, BIT-valkey-2023-36824, DEBIAN-CVE-2023-36824, GHSA-4cfx-h9gq-xpx3, UBUNTU-CVE-2023-36824
Key Facts
Patch immediately- CVE-2023-36824 is a high-severity vulnerability (CVSS 8.8 v3.1) affecting Redis, Fedora (Fedoraproject), keydb (bitnami) and 4 more products.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 77% probability of exploitation in the next 30 days.
- Fixed versions are available, including keydb 7.0.12, Redis 5:7.0.12-1, Redis 5:7.0.15-1~deb12u1.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v3.1
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
77%
Higher than 99.5% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
None known
Get the full CVE-2023-36824 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted COMMAND GETKEYS or COMMAND GETKEYSANDFLAGSand authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.
Affected Products
37 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| RedisRedis | >= 7.0.0, >= >= 7.0.0, < 7.0.12 | 7.0.12 |
| FedoraFedoraproject | 37, 38 | n/a |
| keydbbitnami | >= 7.0.0 | 7.0.12 |
| valkeybitnami | >= 7.0.0 | 7.0.12 |
| redis7suse | See advisory | 7.0.8-150500.3.3.1 |
Patched Releases
keydb
7.0.12
Redis
5:7.0.12-1, 5:7.0.15-1~deb12u1, 7.0.12, 7.0.12-1.1, 7.0.12-1.ph4, 7.0.12-1.ph5, 7.0.12-r0
redis-server
7.0.12
redis7
7.0.8-150500.3.3.1
valkey
7.0.12
Timeline
Publicly disclosed
Jul 11, 2023
Last updated
Sep 8, 2026
Weakness Type
- CWE-122 Heap-based Buffer Overflow
- CWE-131 Incorrect Calculation of Buffer Size
- CWE-787 Out-of-bounds Write
References
- advisoryhttps://bugzilla.suse.com/1208790
- advisoryhttps://bugzilla.suse.com/1208793
- advisoryhttps://bugzilla.suse.com/1209528
- advisoryhttps://bugzilla.suse.com/1210548
- advisoryhttps://bugzilla.suse.com/1213193
FAQ
Common Questions.
Redis is an in-memory database that persists on disk.
Affected: Redis versions >= 7.0.0, >= >= 7.0.0, < 7.0.12; Fedora (Fedoraproject) versions 37, 38; keydb (bitnami) versions >= 7.0.0, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including keydb 7.0.12, Redis 5:7.0.12-1, Redis 5:7.0.15-1~deb12u1.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2023-36824 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo