CVE-2023-22458

score

<0.1

cvss

5.5

epss

72.0%

published

2023-01-20

kev added

—

first seen

2026-10-21

Redis versions 6.2 < 6.2.9 and 7.0 < 7.0.8 contain a denial-of-service caused by assertion failure triggered by crafted arguments in HRANDFIELD or ZRANDMEMBER commands, letting authenticated users crash Redis, exploit requires authenticated access.