CVE & CISA-KEV CatalogNVD
CVE-2023-45145
LOW3.6
CVSS v3
Description
Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during a short period of time, another process to establish an otherwise unauthorized connection. This problem has existed since Redis 2.6.0-RC1. This issue has been addressed in Redis versions 7.2.2, 7.0.14 and 6.2.14. Users are advised to upgrade. For users unable to upgrade, it is possible to work around the problem by disabling Unix sockets, starting Redis with a restrictive umask, or storing the Unix socket file in a protected directory.
How to fix
Remediation Available
redisDebian
Fixed in:5:6.0.16-1+deb11u3CVE-2023-45145
Fixed in:5:7.0.15-1~deb12u1CVE-2023-45145
Fixed in:5:7.0.14-1CVE-2023-45145
Fixed in:5:7.0.14-1CVE-2023-45145
redisRed Hat / RHEL
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.aarch64::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.s390x::redis:6RHSA-2025:0595
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.src::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.ppc64le::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.aarch64::redis:6RHSA-2025:0595
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.s390x::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.x86_64::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.src::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.ppc64le::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.x86_64::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
redisRocky
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.src::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.aarch64::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.ppc64le::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.s390x::redis:6RHSA-2025:0595
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.x86_64::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.s390x::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.ppc64le::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.src::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.aarch64::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.x86_64::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
redis-debuginfoRocky
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.aarch64::redis:6RHSA-2025:0595
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.x86_64::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.s390x::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.ppc64le::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.x86_64::redis:6RHSA-2025:0595
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.aarch64::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.ppc64le::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.s390x::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
redis-debuginfoRed Hat / RHEL
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.x86_64::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.s390x::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.ppc64le::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.s390x::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.x86_64::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.ppc64le::redis:6RHSA-2025:0595
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.aarch64::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.aarch64::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
redis-debugsourceRocky
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.s390x::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.ppc64le::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.x86_64::redis:6RHSA-2025:0595
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.aarch64::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.x86_64::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.s390x::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.ppc64le::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.aarch64::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
redis-debugsourceRed Hat / RHEL
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.x86_64::redis:6RHSA-2025:0595
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.ppc64le::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.s390x::redis:6RHSA-2025:0595
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.x86_64::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.aarch64::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.ppc64le::redis:6RHSA-2025:0595
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.aarch64::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.s390x::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
redis-develRed Hat / RHEL
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.aarch64::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.s390x::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.ppc64le::redis:6RHSA-2025:0595
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.x86_64::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.aarch64::redis:6RHSA-2025:0595
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.ppc64le::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.s390x::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.x86_64::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
redis-develRocky
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.ppc64le::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.x86_64::redis:7RHSA-2024:10869
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.aarch64::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.s390x::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.x86_64::redis:6RHSA-2025:0595
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.s390x::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.ppc64le::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.aarch64::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
redis-docRocky
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.noarch::redis:6RHSA-2025:0595
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.noarch::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
redis-docRed Hat / RHEL
Fixed in:0:7.2.6-1.module+el9.5.0+22422+63e067d8.noarch::redis:7RHSA-2024:10869
Fixed in:0:6.2.17-1.module+el8.10.0+22680+748527fd.noarch::redis:6RHSA-2025:0595
Fixed in:0:6.2.17-1.el9_5RHSA-2025:0693
redisUbuntu
Fixed in:2:2.8.4-2ubuntu0.2+esm3USN-6531-1
Fixed in:2:3.0.6-1ubuntu0.4+esm2USN-6531-1
Fixed in:5:4.0.9-1ubuntu0.2+esm4USN-6531-1
Fixed in:5:5.0.7-2ubuntu0.1+esm2USN-6531-1
Fixed in:5:6.0.16-1ubuntu1+esm1USN-6531-1
redis-serverUbuntu
Fixed in:2:2.8.4-2ubuntu0.2+esm3USN-6531-1
Fixed in:2:3.0.6-1ubuntu0.4+esm2USN-6531-1
Fixed in:5:4.0.9-1ubuntu0.2+esm4USN-6531-1
Fixed in:5:5.0.7-2ubuntu0.1+esm2USN-6531-1
Fixed in:5:6.0.16-1ubuntu1+esm1USN-6531-1
redis-toolsUbuntu
Fixed in:2:2.8.4-2ubuntu0.2+esm3USN-6531-1
Fixed in:2:3.0.6-1ubuntu0.4+esm2USN-6531-1
Fixed in:5:4.0.9-1ubuntu0.2+esm4USN-6531-1
Fixed in:5:5.0.7-2ubuntu0.1+esm2USN-6531-1
Fixed in:5:6.0.16-1ubuntu1+esm1USN-6531-1
Redis on WindowsWindows application
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorLocal
Attack ComplexityHigh
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityLow
IntegrityLow
AvailabilityNone
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Exploit Intelligence
0.44%probability of exploitation in 30 days
36thpercentile
Low risk: more likely to be exploited than 36% of all known CVEs.
References
Patch1
Vendor Advisory1
Third-Party Advisory4
Mailing List1
Related Vulnerabilities
Other CWE-668 vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2022-39952 | Critical | 9.8 | 100% | - | Fix |
| CVE-2017-16597 | Critical | 9.8 | 57% | - | - |
| CVE-2017-16603 | High | 8.8 | 54% | - | - |
| CVE-2024-25153 | Critical | 9.8 | 42% | - | Fix |
| CVE-2017-0215 | Medium | 5.3 | 36% | - | - |
| CVE-2022-25236 | Critical | 9.8 | 34% | - | Fix |
Embed a live status badge for CVE-2023-45145
Markdown
[](https://tridentstack.com/cve/CVE-2023-45145)HTML
<a href="https://tridentstack.com/cve/CVE-2023-45145"><img src="https://tridentstack.com/cve/badge/CVE-2023-45145.svg" alt="CVE-2023-45145"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.