CVE-2023-28859 - Vulnerability Details - OpenCVE

redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Redis	Redis-py

Configuration 1 [-]

OR	cpe:2.3:a:redis:redis-py::::::::
	cpe:2.3:a:redis:redis-py::::::::

No data.

References

Link	Providers
https://github.com/redis/redis-py/issues/2665
https://github.com/redis/redis-py/pull/2641
https://github.com/redis/redis-py/pull/2666
https://github.com/redis/redis-py/releases/tag/v4.4.4
https://github.com/redis/redis-py/releases/tag/v4.5.4
https://nvd.nist.gov/vuln/detail/CVE-2023-28859
https://www.cve.org/CVERecord?id=CVE-2023-28859

History

Thu, 20 Feb 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-03-26T00:00:00.000Z

Updated: 2025-02-20T15:34:03.848Z

Reserved: 2023-03-26T00:00:00.000Z

Link: CVE-2023-28859

Vulnrichment

Updated: 2024-08-02T13:51:38.525Z

NVD

Status : Modified

Published: 2023-03-26T19:15:06.850

Modified: 2024-11-21T07:56:10.500

Link: CVE-2023-28859

Redhat

Severity : Moderate

Publid Date: 2023-03-26T00:00:00Z

Links: CVE-2023-28859 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-28859", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-02-20T15:34:03.848Z", "dateReserved": "2023-03-26T00:00:00.000Z", "datePublished": "2023-03-26T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-03-30T21:38:05.900Z"}, "descriptions": [{"lang": "en", "value": "redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/redis/redis-py/pull/2641"}, {"url": "https://github.com/redis/redis-py/issues/2665"}, {"url": "https://github.com/redis/redis-py/releases/tag/v4.4.4"}, {"url": "https://github.com/redis/redis-py/releases/tag/v4.5.4"}, {"url": "https://github.com/redis/redis-py/pull/2666"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T13:51:38.525Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/redis/redis-py/pull/2641", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/issues/2665", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/releases/tag/v4.4.4", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/releases/tag/v4.5.4", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/pull/2666", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-20T15:33:41.900049Z", "id": "CVE-2023-28859", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-20T15:34:03.848Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/redis/redis-py/pull/2641", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/issues/2665", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/releases/tag/v4.4.4", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/releases/tag/v4.5.4", "tags": ["x_transferred"]}, {"url": "https://github.com/redis/redis-py/pull/2666", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T13:51:38.525Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-28859", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-20T15:33:41.900049Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-20T15:33:54.566Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://github.com/redis/redis-py/pull/2641"}, {"url": "https://github.com/redis/redis-py/issues/2665"}, {"url": "https://github.com/redis/redis-py/releases/tag/v4.4.4"}, {"url": "https://github.com/redis/redis-py/releases/tag/v4.5.4"}, {"url": "https://github.com/redis/redis-py/pull/2666"}], "descriptions": [{"lang": "en", "value": "redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-03-30T21:38:05.900Z"}}}, "cveMetadata": {"cveId": "CVE-2023-28859", "state": "PUBLISHED", "dateUpdated": "2025-02-20T15:34:03.848Z", "dateReserved": "2023-03-26T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2023-03-26T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redis:redis-py:*:*:*:*:*:*:*:*", "matchCriteriaId": "8BF5D290-49BC-4C70-B801-9DCE97070663", "versionEndExcluding": "4.4.4", "versionStartIncluding": "4.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redis:redis-py:*:*:*:*:*:*:*:*", "matchCriteriaId": "39E01CD5-9AC0-46ED-A952-1EAD9FBFC930", "versionEndExcluding": "4.5.4", "versionStartIncluding": "4.5.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. (This could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address data leakage across AsyncIO connections in general."}], "id": "CVE-2023-28859", "lastModified": "2024-11-21T07:56:10.500", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-03-26T19:15:06.850", "references": [{"source": "cve@mitre.org", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://github.com/redis/redis-py/issues/2665"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/redis/redis-py/pull/2641"}, {"source": "cve@mitre.org", "tags": ["Release Notes"], "url": "https://github.com/redis/redis-py/pull/2666"}, {"source": "cve@mitre.org", "tags": ["Release Notes"], "url": "https://github.com/redis/redis-py/releases/tag/v4.4.4"}, {"source": "cve@mitre.org", "tags": ["Release Notes"], "url": "https://github.com/redis/redis-py/releases/tag/v4.5.4"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://github.com/redis/redis-py/issues/2665"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/redis/redis-py/pull/2641"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://github.com/redis/redis-py/pull/2666"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://github.com/redis/redis-py/releases/tag/v4.4.4"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://github.com/redis/redis-py/releases/tag/v4.5.4"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-459"}], "source": "nvd@nist.gov", "type": "Primary"}]}