Bug 2237826 (CVE-2023-41053)

Summary:	CVE-2023-41053 redis: Redis SORT_RO may bypass ACL configuration
Product:	[Other] Security Response	Reporter:	Avinash Hanwate <ahanwate>
Component:	vulnerability	Assignee:	Product Security <prodsec-ir-bot>
Status:	NEW ---	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	hhorak, jorton, rcollet
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	redis-server 7.0.13, redis-server 7.2.1	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2238560, 2238561, 2238562, 2238563, 2238564, 2238569
Bug Blocks:	2237834

Description Avinash Hanwate 2023-09-07 05:55:26 UTC

Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been fixed in Redis 7.0.13 and 7.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

https://github.com/redis/redis/commit/9e505e6cd842338424e05883521ca1fb7d0f47f6
https://github.com/redis/redis/security/advisories/GHSA-q4jr-5p56-4xwc

Comment 1 Marian Rehak 2023-09-12 13:06:16 UTC

Created pymodbus tracking bugs for this issue:

Affects: fedora-37 [bug 2238562]


Created redis tracking bugs for this issue:

Affects: epel-7 [bug 2238561]
Affects: fedora-37 [bug 2238563]
Affects: fedora-38 [bug 2238564]
Affects: fedora-all [bug 2238560]

Comment 5 errata-xmlrpc 2024-12-05 21:41:01 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:10869 https://access.redhat.com/errata/RHSA-2024:10869