CVE-2023-45145
CVE-2023-45145 is a low-severity vulnerability in Redis with a CVSS 3.x base score of 3.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-668.
Key facts
- Severity: Low (CVSS 3.x base score 3.6)
- EPSS exploit prediction: 0% (36th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-668
- Affected product: Redis
- Published:
- Last modified:
Description
Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during a short period of time, another process to establish an otherwise unauthorized connection. This problem has existed since Redis 2.6.0-RC1. This issue has been addressed in Redis versions 7.2.2, 7.0.14 and 6.2.14. Users are advised to upgrade. For users unable to upgrade, it is possible to work around the problem by disabling Unix sockets, starting Redis with a restrictive umask, or storing the Unix socket file in a protected directory.
Frequently asked questions
- What is CVE-2023-45145?
- Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during a short period of time, another process to establish an otherwise unauthorized connection. This problem has existed since Redis 2.6.0-RC1. This issue has been addressed in Redis versions 7.2.2, 7.0.14 and 6.2.14. Users are advised to upgrade. For users unable to upgrade, it is possible to work around the problem by disabling Unix sockets, starting Redis with a restrictive umask, or storing the Unix socket file in a protected directory.
- How severe is CVE-2023-45145?
- CVE-2023-45145 has a CVSS 3.x base score of 3.6, rated low severity. It is exploitable over local access with high attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity low, and availability none.
- Is CVE-2023-45145 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (36th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2023-45145?
- CVE-2023-45145 primarily affects Redis. In total, 6 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2023-45145?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2023-45145 published?
- CVE-2023-45145 was published on 2023-10-18 and last updated on 2026-06-17.
References
- https://github.com/redis/redis/commit/03345ddc7faf7af079485f2cbe5d17a1611cbce1
- https://github.com/redis/redis/security/advisories/GHSA-ghmp-889m-7cvx
- https://lists.debian.org/debian-lts-announce/2023/10/msg00032.html
- https://lists.fedoraproject.org/archives/list/[email protected]/message/464JPNBWE433ZGYXO3KN72VR3KJPWHAW/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/BNEK2K4IE7MPKRD6H36JXZMJKYS6I5GQ/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/DZMGTTV5XM4LA66FSIJSETNBBRRPJYOQ/
- https://security.netapp.com/advisory/ntap-20231116-0014/
Affected products (6)
- cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*
- cpe:2.3:a:redis:redis:2.6.0:rc1:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
More vulnerabilities in Redis
- CVE-2022-0543 — Critical (CVSS 10.0): It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a…
- CVE-2025-49844 — Critical (CVSS 9.9): Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user…
- CVE-2026-25243 — High (CVSS 8.8): Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not…
- CVE-2026-23479 — High (CVSS 8.8): Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not…
- CVE-2025-62507 — High (CVSS 8.8): Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the…
- CVE-2026-23631 — High (CVSS 8.1): Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated…
Other CWE-668 (Exposure of Resource to Wrong Sphere) vulnerabilities
- CVE-2025-2857 — Critical (CVSS 10.0): Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in…
- CVE-2019-8779 — Critical (CVSS 10.0): A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct…
- CVE-2012-1846 — Critical (CVSS 10.0): Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging…
- CVE-2022-43684 — Critical (CVSS 9.9): ServiceNow has released patches and an upgrade that address an Access Control List (ACL) bypass issue in ServiceNow…
- CVE-2022-24900 — Critical (CVSS 9.9): Piano LED Visualizer is software that allows LED lights to light up as a person plays a piano connected to a computer.…
- CVE-2019-16541 — Critical (CVSS 9.9): Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site…
Browse all CWE-668 (Exposure of Resource to Wrong Sphere) vulnerabilities →