Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-45145

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during a short period of time, another process to establish an otherwise unauthorized connection. This problem has existed since Redis 2.6.0-RC1. This issue has been addressed in Redis versions 7.2.2, 7.0.14 and 6.2.14. Users are advised to upgrade. For users unable to upgrade, it is possible to work around the problem by disabling Unix sockets, starting Redis with a restrictive umask, or storing the Unix socket file in a protected directory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.5%
CVSS Severity
CVSS v3 Score 3.6
References
Products affected by CVE-2023-45145
  • Redis » Redis » Version: 2.6.0
    cpe:2.3:a:redis:redis:2.6.0
  • Redis » Redis » Version: 2.6.1
    cpe:2.3:a:redis:redis:2.6.1
  • Redis » Redis » Version: 2.6.10
    cpe:2.3:a:redis:redis:2.6.10
  • Redis » Redis » Version: 2.6.11
    cpe:2.3:a:redis:redis:2.6.11
  • Redis » Redis » Version: 2.6.12
    cpe:2.3:a:redis:redis:2.6.12
  • Redis » Redis » Version: 2.6.13
    cpe:2.3:a:redis:redis:2.6.13
  • Redis » Redis » Version: 2.6.14
    cpe:2.3:a:redis:redis:2.6.14
  • Redis » Redis » Version: 2.6.15
    cpe:2.3:a:redis:redis:2.6.15
  • Redis » Redis » Version: 2.6.16
    cpe:2.3:a:redis:redis:2.6.16
  • Redis » Redis » Version: 2.6.17
    cpe:2.3:a:redis:redis:2.6.17
  • Redis » Redis » Version: 2.6.2
    cpe:2.3:a:redis:redis:2.6.2
  • Redis » Redis » Version: 2.6.3
    cpe:2.3:a:redis:redis:2.6.3
  • Redis » Redis » Version: 2.6.4
    cpe:2.3:a:redis:redis:2.6.4
  • Redis » Redis » Version: 2.6.5
    cpe:2.3:a:redis:redis:2.6.5
  • Redis » Redis » Version: 2.6.6
    cpe:2.3:a:redis:redis:2.6.6
  • Redis » Redis » Version: 2.6.7
    cpe:2.3:a:redis:redis:2.6.7
  • Redis » Redis » Version: 2.6.8
    cpe:2.3:a:redis:redis:2.6.8
  • Redis » Redis » Version: 2.6.9
    cpe:2.3:a:redis:redis:2.6.9
  • Redis » Redis » Version: 2.8.0
    cpe:2.3:a:redis:redis:2.8.0
  • Redis » Redis » Version: 2.8.1
    cpe:2.3:a:redis:redis:2.8.1
  • Redis » Redis » Version: 2.8.10
    cpe:2.3:a:redis:redis:2.8.10
  • Redis » Redis » Version: 2.8.11
    cpe:2.3:a:redis:redis:2.8.11
  • Redis » Redis » Version: 2.8.12
    cpe:2.3:a:redis:redis:2.8.12
  • Redis » Redis » Version: 2.8.13
    cpe:2.3:a:redis:redis:2.8.13
  • Redis » Redis » Version: 2.8.14
    cpe:2.3:a:redis:redis:2.8.14
  • Redis » Redis » Version: 2.8.15
    cpe:2.3:a:redis:redis:2.8.15
  • Redis » Redis » Version: 2.8.16
    cpe:2.3:a:redis:redis:2.8.16
  • Redis » Redis » Version: 2.8.17
    cpe:2.3:a:redis:redis:2.8.17
  • Redis » Redis » Version: 2.8.18
    cpe:2.3:a:redis:redis:2.8.18
  • Redis » Redis » Version: 2.8.19
    cpe:2.3:a:redis:redis:2.8.19
  • Redis » Redis » Version: 2.8.2
    cpe:2.3:a:redis:redis:2.8.2
  • Redis » Redis » Version: 2.8.20
    cpe:2.3:a:redis:redis:2.8.20
  • Redis » Redis » Version: 2.8.21
    cpe:2.3:a:redis:redis:2.8.21
  • Redis » Redis » Version: 2.8.22
    cpe:2.3:a:redis:redis:2.8.22
  • Redis » Redis » Version: 2.8.23
    cpe:2.3:a:redis:redis:2.8.23
  • Redis » Redis » Version: 2.8.24
    cpe:2.3:a:redis:redis:2.8.24
  • Redis » Redis » Version: 2.8.3
    cpe:2.3:a:redis:redis:2.8.3
  • Redis » Redis » Version: 2.8.4
    cpe:2.3:a:redis:redis:2.8.4
  • Redis » Redis » Version: 2.8.5
    cpe:2.3:a:redis:redis:2.8.5
  • Redis » Redis » Version: 2.8.6
    cpe:2.3:a:redis:redis:2.8.6
  • Redis » Redis » Version: 2.8.7
    cpe:2.3:a:redis:redis:2.8.7
  • Redis » Redis » Version: 2.8.8
    cpe:2.3:a:redis:redis:2.8.8
  • Redis » Redis » Version: 2.8.9
    cpe:2.3:a:redis:redis:2.8.9
  • Redis » Redis » Version: 3.0.0
    cpe:2.3:a:redis:redis:3.0.0
  • Redis » Redis » Version: 3.0.1
    cpe:2.3:a:redis:redis:3.0.1
  • Redis » Redis » Version: 3.0.2
    cpe:2.3:a:redis:redis:3.0.2
  • Redis » Redis » Version: 3.0.3
    cpe:2.3:a:redis:redis:3.0.3
  • Redis » Redis » Version: 3.0.4
    cpe:2.3:a:redis:redis:3.0.4
  • Redis » Redis » Version: 3.0.5
    cpe:2.3:a:redis:redis:3.0.5
  • Redis » Redis » Version: 3.0.6
    cpe:2.3:a:redis:redis:3.0.6
  • Redis » Redis » Version: 3.0.7
    cpe:2.3:a:redis:redis:3.0.7
  • Redis » Redis » Version: 3.2.0
    cpe:2.3:a:redis:redis:3.2.0
  • Redis » Redis » Version: 3.2.1
    cpe:2.3:a:redis:redis:3.2.1
  • Redis » Redis » Version: 3.2.10
    cpe:2.3:a:redis:redis:3.2.10
  • Redis » Redis » Version: 3.2.11
    cpe:2.3:a:redis:redis:3.2.11
  • Redis » Redis » Version: 3.2.12
    cpe:2.3:a:redis:redis:3.2.12
  • Redis » Redis » Version: 3.2.13
    cpe:2.3:a:redis:redis:3.2.13
  • Redis » Redis » Version: 3.2.2
    cpe:2.3:a:redis:redis:3.2.2
  • Redis » Redis » Version: 3.2.3
    cpe:2.3:a:redis:redis:3.2.3
  • Redis » Redis » Version: 3.2.4
    cpe:2.3:a:redis:redis:3.2.4
  • Redis » Redis » Version: 3.2.5
    cpe:2.3:a:redis:redis:3.2.5
  • Redis » Redis » Version: 3.2.6
    cpe:2.3:a:redis:redis:3.2.6
  • Redis » Redis » Version: 3.2.7
    cpe:2.3:a:redis:redis:3.2.7
  • Redis » Redis » Version: 3.2.8
    cpe:2.3:a:redis:redis:3.2.8
  • Redis » Redis » Version: 3.2.9
    cpe:2.3:a:redis:redis:3.2.9
  • Redis » Redis » Version: 4.0.0
    cpe:2.3:a:redis:redis:4.0.0
  • Redis » Redis » Version: 4.0.1
    cpe:2.3:a:redis:redis:4.0.1
  • Redis » Redis » Version: 4.0.10
    cpe:2.3:a:redis:redis:4.0.10
  • Redis » Redis » Version: 4.0.11
    cpe:2.3:a:redis:redis:4.0.11
  • Redis » Redis » Version: 4.0.12
    cpe:2.3:a:redis:redis:4.0.12
  • Redis » Redis » Version: 4.0.13
    cpe:2.3:a:redis:redis:4.0.13
  • Redis » Redis » Version: 4.0.14
    cpe:2.3:a:redis:redis:4.0.14
  • Redis » Redis » Version: 4.0.2
    cpe:2.3:a:redis:redis:4.0.2
  • Redis » Redis » Version: 4.0.3
    cpe:2.3:a:redis:redis:4.0.3
  • Redis » Redis » Version: 4.0.4
    cpe:2.3:a:redis:redis:4.0.4
  • Redis » Redis » Version: 4.0.5
    cpe:2.3:a:redis:redis:4.0.5
  • Redis » Redis » Version: 4.0.6
    cpe:2.3:a:redis:redis:4.0.6
  • Redis » Redis » Version: 4.0.7
    cpe:2.3:a:redis:redis:4.0.7
  • Redis » Redis » Version: 4.0.8
    cpe:2.3:a:redis:redis:4.0.8
  • Redis » Redis » Version: 4.0.9
    cpe:2.3:a:redis:redis:4.0.9
  • Redis » Redis » Version: 5.0.0
    cpe:2.3:a:redis:redis:5.0.0
  • Redis » Redis » Version: 5.0.1
    cpe:2.3:a:redis:redis:5.0.1
  • Redis » Redis » Version: 5.0.10
    cpe:2.3:a:redis:redis:5.0.10
  • Redis » Redis » Version: 5.0.11
    cpe:2.3:a:redis:redis:5.0.11
  • Redis » Redis » Version: 5.0.12
    cpe:2.3:a:redis:redis:5.0.12
  • Redis » Redis » Version: 5.0.13
    cpe:2.3:a:redis:redis:5.0.13
  • Redis » Redis » Version: 5.0.14
    cpe:2.3:a:redis:redis:5.0.14
  • Redis » Redis » Version: 5.0.2
    cpe:2.3:a:redis:redis:5.0.2
  • Redis » Redis » Version: 5.0.3
    cpe:2.3:a:redis:redis:5.0.3
  • Redis » Redis » Version: 5.0.4
    cpe:2.3:a:redis:redis:5.0.4
  • Redis » Redis » Version: 5.0.5
    cpe:2.3:a:redis:redis:5.0.5
  • Redis » Redis » Version: 5.0.6
    cpe:2.3:a:redis:redis:5.0.6
  • Redis » Redis » Version: 5.0.7
    cpe:2.3:a:redis:redis:5.0.7
  • Redis » Redis » Version: 5.0.8
    cpe:2.3:a:redis:redis:5.0.8
  • Redis » Redis » Version: 5.0.9
    cpe:2.3:a:redis:redis:5.0.9
  • Redis » Redis » Version: 6.0.0
    cpe:2.3:a:redis:redis:6.0.0
  • Redis » Redis » Version: 6.0.1
    cpe:2.3:a:redis:redis:6.0.1
  • Redis » Redis » Version: 6.0.10
    cpe:2.3:a:redis:redis:6.0.10
  • Redis » Redis » Version: 6.0.11
    cpe:2.3:a:redis:redis:6.0.11
  • Redis » Redis » Version: 6.0.12
    cpe:2.3:a:redis:redis:6.0.12
  • Redis » Redis » Version: 6.0.13
    cpe:2.3:a:redis:redis:6.0.13
  • Redis » Redis » Version: 6.0.14
    cpe:2.3:a:redis:redis:6.0.14
  • Redis » Redis » Version: 6.0.15
    cpe:2.3:a:redis:redis:6.0.15
  • Redis » Redis » Version: 6.0.16
    cpe:2.3:a:redis:redis:6.0.16
  • Redis » Redis » Version: 6.0.17
    cpe:2.3:a:redis:redis:6.0.17
  • Redis » Redis » Version: 6.0.19
    cpe:2.3:a:redis:redis:6.0.19
  • Redis » Redis » Version: 6.0.2
    cpe:2.3:a:redis:redis:6.0.2
  • Redis » Redis » Version: 6.0.3
    cpe:2.3:a:redis:redis:6.0.3
  • Redis » Redis » Version: 6.0.4
    cpe:2.3:a:redis:redis:6.0.4
  • Redis » Redis » Version: 6.0.5
    cpe:2.3:a:redis:redis:6.0.5
  • Redis » Redis » Version: 6.0.6
    cpe:2.3:a:redis:redis:6.0.6
  • Redis » Redis » Version: 6.0.7
    cpe:2.3:a:redis:redis:6.0.7
  • Redis » Redis » Version: 6.0.8
    cpe:2.3:a:redis:redis:6.0.8
  • Redis » Redis » Version: 6.0.9
    cpe:2.3:a:redis:redis:6.0.9
  • Redis » Redis » Version: 6.2.0
    cpe:2.3:a:redis:redis:6.2.0
  • Redis » Redis » Version: 6.2.1
    cpe:2.3:a:redis:redis:6.2.1
  • Redis » Redis » Version: 6.2.10
    cpe:2.3:a:redis:redis:6.2.10
  • Redis » Redis » Version: 6.2.11
    cpe:2.3:a:redis:redis:6.2.11
  • Redis » Redis » Version: 6.2.12
    cpe:2.3:a:redis:redis:6.2.12
  • Redis » Redis » Version: 6.2.13
    cpe:2.3:a:redis:redis:6.2.13
  • Redis » Redis » Version: 6.2.2
    cpe:2.3:a:redis:redis:6.2.2
  • Redis » Redis » Version: 6.2.3
    cpe:2.3:a:redis:redis:6.2.3
  • Redis » Redis » Version: 6.2.4
    cpe:2.3:a:redis:redis:6.2.4
  • Redis » Redis » Version: 6.2.5
    cpe:2.3:a:redis:redis:6.2.5
  • Redis » Redis » Version: 6.2.6
    cpe:2.3:a:redis:redis:6.2.6
  • Redis » Redis » Version: 6.2.7
    cpe:2.3:a:redis:redis:6.2.7
  • Redis » Redis » Version: 6.2.8
    cpe:2.3:a:redis:redis:6.2.8
  • Redis » Redis » Version: 6.2.9
    cpe:2.3:a:redis:redis:6.2.9
  • Redis » Redis » Version: 7.0.0
    cpe:2.3:a:redis:redis:7.0.0
  • Redis » Redis » Version: 7.0.1
    cpe:2.3:a:redis:redis:7.0.1
  • Redis » Redis » Version: 7.0.10
    cpe:2.3:a:redis:redis:7.0.10
  • Redis » Redis » Version: 7.0.11
    cpe:2.3:a:redis:redis:7.0.11
  • Redis » Redis » Version: 7.0.12
    cpe:2.3:a:redis:redis:7.0.12
  • Redis » Redis » Version: 7.0.13
    cpe:2.3:a:redis:redis:7.0.13
  • Redis » Redis » Version: 7.0.2
    cpe:2.3:a:redis:redis:7.0.2
  • Redis » Redis » Version: 7.0.3
    cpe:2.3:a:redis:redis:7.0.3
  • Redis » Redis » Version: 7.0.4
    cpe:2.3:a:redis:redis:7.0.4
  • Redis » Redis » Version: 7.0.5
    cpe:2.3:a:redis:redis:7.0.5
  • Redis » Redis » Version: 7.0.6
    cpe:2.3:a:redis:redis:7.0.6
  • Redis » Redis » Version: 7.0.7
    cpe:2.3:a:redis:redis:7.0.7
  • Redis » Redis » Version: 7.0.8
    cpe:2.3:a:redis:redis:7.0.8
  • Redis » Redis » Version: 7.0.9
    cpe:2.3:a:redis:redis:7.0.9
  • Redis » Redis » Version: 7.2.0
    cpe:2.3:a:redis:redis:7.2.0
  • Redis » Redis » Version: 7.2.1
    cpe:2.3:a:redis:redis:7.2.1
  • Debian » Debian Linux » Version: 10.0
    cpe:2.3:o:debian:debian_linux:10.0
  • Fedoraproject » Fedora » Version: 37
    cpe:2.3:o:fedoraproject:fedora:37
  • Fedoraproject » Fedora » Version: 38
    cpe:2.3:o:fedoraproject:fedora:38
  • Fedoraproject » Fedora » Version: 39
    cpe:2.3:o:fedoraproject:fedora:39


Products
Pricing
Contact Us

Shodan ® - All rights reserved