Bug 1215094 (CVE-2023-41053) - VUL-0: CVE-2023-41053: redis: SORT_RO may bypass ACL configuration
Summary: VUL-0: CVE-2023-41053: redis: SORT_RO may bypass ACL configuration
Status: RESOLVED FIXED
Alias: CVE-2023-41053
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Minor
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/377571/
Whiteboard: CVSSv3.1:SUSE:CVE-2023-41053:3.3:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2023-09-07 06:02 UTC by Carlos López
Modified: 2024-03-04 17:10 UTC (History)
1 user (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Carlos López 2023-09-07 06:02:16 UTC
CVE-2023-41053

Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been fixed in Redis 7.0.13 and 7.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

https://github.com/redis/redis/commit/9e505e6cd842338424e05883521ca1fb7d0f47f6
https://github.com/redis/redis/security/advisories/GHSA-q4jr-5p56-4xwc

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41053
https://bugzilla.redhat.com/show_bug.cgi?id=2237826
https://www.cve.org/CVERecord?id=CVE-2023-41053
https://github.com/redis/redis/commit/9e505e6cd842338424e05883521ca1fb7d0f47f6
https://github.com/redis/redis/security/advisories/GHSA-q4jr-5p56-4xwc
Comment 1 Carlos López 2023-09-07 06:03:53 UTC
Affected:
- SUSE:ALP:Source:Standard:1.0
- openSUSE:Factory
Comment 3 Maintenance Automation 2023-09-20 20:30:09 UTC
SUSE-SU-2023:3711-1: An update that solves one vulnerability can now be installed.

Category: security (low)
Bug References: 1215094
CVE References: CVE-2023-41053
Sources used:
openSUSE Leap 15.5 (src): redis7-7.0.8-150500.3.6.1
Server Applications Module 15-SP5 (src): redis7-7.0.8-150500.3.6.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 4 Carlos López 2024-02-22 14:31:02 UTC
Done, closing.