CVE-2023-28858 - Vulnerability Details - OpenCVE

redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4.3, and 4.5.3 were released (changing the behavior for pipeline operations); however, please see CVE-2023-28859 about addressing data leakage across AsyncIO connections in general.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Redis	Redis-py

Configuration 1 [-]

OR	cpe:2.3:a:redis:redis-py::::::::
	cpe:2.3:a:redis:redis-py::::::::
	cpe:2.3:a:redis:redis-py::::::::

No data.

References

Link	Providers
https://github.com/redis/redis-py/compare/v4.3.5...v4.3.6
https://github.com/redis/redis-py/compare/v4.4.2...v4.4.3
https://github.com/redis/redis-py/compare/v4.5.2...v4.5.3
https://github.com/redis/redis-py/issues/2624
https://github.com/redis/redis-py/pull/2641
https://nvd.nist.gov/vuln/detail/CVE-2023-28858
https://openai.com/blog/march-20-chatgpt-outage
https://www.cve.org/CVERecord?id=CVE-2023-28858

History

Thu, 20 Feb 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-03-26T00:00:00.000Z

Updated: 2025-02-20T15:35:34.833Z

Reserved: 2023-03-26T00:00:00.000Z

Link: CVE-2023-28858

Vulnrichment

Updated: 2024-08-02T13:51:38.740Z

NVD

Status : Modified

Published: 2023-03-26T19:15:06.780

Modified: 2024-11-21T07:56:10.353

Link: CVE-2023-28858

Redhat

Severity : Moderate

Publid Date: 2023-03-26T00:00:00Z

Links: CVE-2023-28858 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-28858", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-02-20T15:35:34.833Z", "dateReserved": "2023-03-26T00:00:00.000Z", "datePublished": "2023-03-26T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-03-30T21:53:08.718Z"}, "descriptions": [{"lang": "en", "value": "redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4.3, and 4.5.3 were released (changing the behavior for pipeline operations); however, please see CVE-2023-28859 about addressing data leakage across AsyncIO connections in general."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/redis/redis-py/pull/2641"}, {"url": "https://github.com/redis/redis-py/issues/2624"}, {"url": "https://github.com/redis/redis-py/compare/v4.5.2...v4.5.3"}, {"url": "https://github.com/redis/redis-py/compare/v4.4.2...v4.4.3"}, {"url": "https://github.com/redis/redis-py/compare/v4.3.5...v4.3.6"}, {"url": "https://openai.com/blog/march-20-chatgpt-outage"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T13:51:38.740Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/redis/redis-py/pull/2641", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/issues/2624", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/compare/v4.5.2...v4.5.3", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/compare/v4.4.2...v4.4.3", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/compare/v4.3.5...v4.3.6", "tags": ["x_transferred"]}, {"url": "https://openai.com/blog/march-20-chatgpt-outage", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-20T15:35:20.640859Z", "id": "CVE-2023-28858", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-20T15:35:34.833Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/redis/redis-py/pull/2641", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/issues/2624", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/compare/v4.5.2...v4.5.3", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/compare/v4.4.2...v4.4.3", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/compare/v4.3.5...v4.3.6", "tags": ["x_transferred"]}, {"url": "https://openai.com/blog/march-20-chatgpt-outage", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T13:51:38.740Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-28858", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-20T15:35:20.640859Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-20T15:35:29.303Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://github.com/redis/redis-py/pull/2641"}, {"url": "https://github.com/redis/redis-py/issues/2624"}, {"url": "https://github.com/redis/redis-py/compare/v4.5.2...v4.5.3"}, {"url": "https://github.com/redis/redis-py/compare/v4.4.2...v4.4.3"}, {"url": "https://github.com/redis/redis-py/compare/v4.3.5...v4.3.6"}, {"url": "https://openai.com/blog/march-20-chatgpt-outage"}], "descriptions": [{"lang": "en", "value": "redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4.3, and 4.5.3 were released (changing the behavior for pipeline operations); however, please see CVE-2023-28859 about addressing data leakage across AsyncIO connections in general."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-03-30T21:53:08.718Z"}}}, "cveMetadata": {"cveId": "CVE-2023-28858", "state": "PUBLISHED", "dateUpdated": "2025-02-20T15:35:34.833Z", "dateReserved": "2023-03-26T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2023-03-26T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redis:redis-py:*:*:*:*:*:*:*:*", "matchCriteriaId": "01B96893-5078-47C0-A2F2-D1039A45152D", "versionEndExcluding": "4.3.6", "versionStartIncluding": "4.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redis:redis-py:*:*:*:*:*:*:*:*", "matchCriteriaId": "D4512975-5839-4179-9B9E-526526E02C6F", "versionEndExcluding": "4.4.3", "versionStartIncluding": "4.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redis:redis-py:*:*:*:*:*:*:*:*", "matchCriteriaId": "5782D240-CF0F-41B0-9A06-47DD9E51C075", "versionEndExcluding": "4.5.3", "versionStartIncluding": "4.5.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4.3, and 4.5.3 were released (changing the behavior for pipeline operations); however, please see CVE-2023-28859 about addressing data leakage across AsyncIO connections in general."}], "id": "CVE-2023-28858", "lastModified": "2024-11-21T07:56:10.353", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-03-26T19:15:06.780", "references": [{"source": "cve@mitre.org", "tags": ["Patch"], "url": "https://github.com/redis/redis-py/compare/v4.3.5...v4.3.6"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "https://github.com/redis/redis-py/compare/v4.4.2...v4.4.3"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "https://github.com/redis/redis-py/compare/v4.5.2...v4.5.3"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking"], "url": "https://github.com/redis/redis-py/issues/2624"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/redis/redis-py/pull/2641"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://openai.com/blog/march-20-chatgpt-outage"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/redis/redis-py/compare/v4.3.5...v4.3.6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/redis/redis-py/compare/v4.4.2...v4.4.3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/redis/redis-py/compare/v4.5.2...v4.5.3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking"], "url": "https://github.com/redis/redis-py/issues/2624"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/redis/redis-py/pull/2641"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://openai.com/blog/march-20-chatgpt-outage"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-193"}], "source": "nvd@nist.gov", "type": "Primary"}]}