Redis · Redis · CVE-2023-22458
**Name of the Vulnerable Software and Affected Versions**
Redis versions 6.2 through 6.2.8
Redis versions 7.0 through 7.0.7
**Description**
The issue is related to an integer overflow in the Redis database management system. Authenticated users can trigger a denial-of-service by crashing Redis with an assertion failure using specially crafted arguments with the `HRANDFIELD` or `ZRANDMEMBER` command.
**Recommendations**
For Redis versions 6.2 through 6.2.8, upgrade to version 6.2.9 or newer.
For Redis versions 7.0 through 7.0.7, upgrade to version 7.0.8 or newer.
As a temporary workaround, consider restricting access to the `HRANDFIELD` and `ZRANDMEMBER` commands until a patch is applied.