Skip to content
Fencer Intel
low 3.6

CVE-2023-45145 json

Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

published 3y ago modified 2mo ago also BIT-keydb-2023-45145 , BIT-redis-2023-45145 , BIT-valkey-2023-45145 , EUVD-2023-49453 , GHSA-ghmp-889m-7cvx

cvss
3.6
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 38%
public exploits
0
none known

Summary

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during a short period of time, another process to establish an otherwise unauthorized connection. This problem has existed since Redis 2.6.0-RC1. This issue has been addressed in Redis versions 7.2.2, 7.0.14 and 6.2.14. Users are advised to upgrade. For users unable to upgrade, it is possible to work around the problem by disabling Unix sockets, starting Redis with a restrictive umask, or storing the Unix socket file in a protected directory.

Patch / fix

  • bitnami keydb 6.2.14, 7.0.14, 7.2.2
  • bitnami redis 6.2.14, 7.0.14, 7.2.2
  • bitnami valkey 6.2.14, 7.0.14, 7.2.2
  • redis redis 6.2.14, 7.0.14, 7.2.2
  • redis Debian 12 5:7.0.15-1~deb12u1
  • redis Debian 14, Debian 13 5:7.0.14-1

debian advisories DEBIAN-CVE-2023-45145

  • redis Ubuntu Pro 14.04 LTS 2:2.8.4-2ubuntu0.2+esm3
  • redis Ubuntu Pro 16.04 LTS 2:3.0.6-1ubuntu0.4+esm2
  • redis Ubuntu Pro 18.04 LTS 5:4.0.9-1ubuntu0.2+esm4
  • redis Ubuntu Pro 20.04 LTS 5:5.0.7-2ubuntu0.1+esm2
  • redis Ubuntu Pro 22.04 LTS 5:6.0.16-1ubuntu1+esm1

ubuntu advisories UBUNTU-CVE-2023-45145

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • redis RHEL 9 6.2.17-1.el9_5
  • redis RHEL 8 6.2.17-1.module+el8.10.0+22680+748527fd
  • redis RHEL 9 7.2.6-1.module+el9.5.0+22422+63e067d8

red hat advisories RHSA-2025:0693RHSA-2025:0595RHSA-2024:10869

  • redis7 SLE Module for Server Applications 15 SP5, openSUSE Leap 15.5 7.0.8-150500.3.9.1
  • redis SLES for SAP 15 SP3, SLES for SAP 15 SP2, SLES 15 SP3-LTSS +7 more 6.0.14-150200.6.29.1
  • redis SLE Module for Server Applications 15 SP5, SLE Module for Server Applications 15 SP4, openSUSE Leap 15.5 +1 more 6.2.6-150400.3.25.1

suse advisories SUSE-SU-2024:0200-1SUSE-SU-2023:4376-1SUSE-SU-2023:4290-1

  • redis openSUSE Tumbleweed 7.2.2-1.1

opensuse advisories openSUSE-SU-2024:13354-1

  • redis AlmaLinux 9 6.2.17-1.el9_5
  • redis AlmaLinux 8 6.2.17-1.module_el8.10.0+3946+3de613d5
  • redis AlmaLinux 9 7.2.6-1.module_el9.5.0+130+36ae7635

almalinux advisories ALSA-2025:0693ALSA-2025:0595ALSA-2024:10869

  • redis Rocky Linux 9 6.2.17-1.el9_5
  • redis Rocky Linux 8 6.2.17-1.module+el8.10.0+1923+5b85c6a7

rocky linux advisories RLSA-2025:0693RLSA-2025:0595

  • redis Alpine 3.15 6.2.14-r0
  • redis Alpine 3.18, Alpine 3.17, Alpine 3.16 7.0.14-r0
  • redis Alpine 3.24, Alpine 3.23, Alpine 3.22 +3 more 7.2.2-r0

alpine advisories ALPINE-CVE-2023-45145

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • redis CBL-Mariner 2.0 6.2.14-1

azure linux advisories AZL-31653

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Is CVE-2023-45145 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-45145 updated cvss 3.6

redis: possible bypass of Unix socket permissions on startup

  • Red Hat Quay 3 quay/quay-rhel8 Red Hat Software Collections rh-redis6-redis
    affected: workaround, no fix available “It is possible to work around the problem by disabling Unix sockets, starting Redis with a restrictive umask, or storing the Unix socket file in a protected directory.”
  • Red Hat Enterprise Linux AppStream (v. 8) redis 6.2.17-1.module+el8.10.0+22680+748527fd
    fixed: vendor fix “It is possible to work around the problem by disabling Unix sockets, starting Redis with a restrictive umask, or storing the Unix socket file in a protected directory.” RHSA-2025:0595
  • Red Hat Enterprise Linux AppStream (v. 9) redis 6.2.17-1.el9_5, redis 7.2.6-1.module+el9.5.0+22422+63e067d8
    fixed: vendor fix “It is possible to work around the problem by disabling Unix sockets, starting Redis with a restrictive umask, or storing the Unix socket file in a protected directory.” RHSA-2025:0693
  • Red Hat 3scale API Management Platform 2 3amp-2/3scale-amp-system-container, 3amp-2/3scale-amp-backend-container Red Hat Ansible Automation Platform 1.2 ansible-tower Red Hat Fuse 7 redis Red Hat Satellite 6 rubygem-gitlab-sidekiq-fetcher, tfm-rubygem-gitlab-sidekiq-fetcher
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

0.44% chance of exploitation in the next 30 days, higher than 38% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.1 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
NVD 3.1 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
OSV 3.1 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected packages

ecosystem package affected fixed in
bitnami keydb
>=2.6.0, <6.2.14
>=7.0.0, <7.0.14
>=7.2.0, <7.2.2
6.2.14
7.0.14
7.2.2
bitnami redis
>=2.6.0, <6.2.14
>=7.0.0, <7.0.14
>=7.2.0, <7.2.2
6.2.14
7.0.14
7.2.2
bitnami valkey
>=2.6.0, <6.2.14
>=7.0.0, <7.0.14
>=7.2.0, <7.2.2
6.2.14
7.0.14
7.2.2

Affected products

  • redis redis

Classification

Weakness
  • CWE-668 Exposure of Resource to Wrong Sphere
Technology feeds

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

The maintainers of redis/redis published their own advisory on GitHub. Reviewed sources take precedence over it.