Integer overflow in multiple Redis commands can lead to denial-of-service
No sign of exploitation. No public exploitation artifact known so far.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Redis can crash when an authenticated user sends specially crafted `HRANDFIELD` or `ZRANDMEMBER` commands, causing the database to stop working temporarily. This affects Redis 6.2 and 7.0 versions, so administrators should update to patched versions.
An integer overflow in `HRANDFIELD` and `ZRANDMEMBER` commands allows authenticated users to trigger an assertion failure that crashes the Redis process. The vulnerability requires valid authentication and affects Redis 6.2.0–6.2.8 and 7.0.0–7.0.7, resulting in denial-of-service via unhandled exception.