CVE-2023-31654

Summary

CVE-2023-31654 is a newly identified vulnerability affecting Redis raft master versions. The issue stems from an Object Descriptor Reference (ODR) violation within the hiredisAllocFns function located at /opt/fs/redisraft/deps/hiredis/alloc.c. This vulnerability could potentially be exploited to execute arbitrary code or manipulate data, posing a significant security risk for affected systems. Users are strongly urged to apply the necessary patches or upgrades to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.