redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4.3, and 4.5.3 were released (changing the behavior for pipeline operations); however, please see CVE-2023-28859 about addressing data leakage across AsyncIO connections in general.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune     time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this     CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4.3, and 4.5.3 were     released (changing the behavior for pipeline operations); however, please see CVE-2023-28859 about     addressing data leakage across AsyncIO connections in general. (CVE-2023-28858)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0819 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-28859:
    redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis     command at an inopportune time, and can send response data to the client of an unrelated request. (This     could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address     data leakage across AsyncIO connections in general.

    CVE-2023-28858:
    redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune     time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this     CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4.3, and 4.5.3 were     released (changing the behavior for pipeline operations); however, please see CVE-2023-28859 about     addressing data leakage across AsyncIO connections in general.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune
    time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this
    CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4.3, and 4.5.3 were
    released (changing the behavior for pipeline operations); however, please see CVE-2023-28859 about
    addressing data leakage across AsyncIO connections in general. (CVE-2023-28858)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune
    time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this
    CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4.3, and 4.5.3 were
    released (changing the behavior for pipeline operations); however, please see CVE-2023-28859 about
    addressing data leakage across AsyncIO connections in general. (CVE-2023-28858)

  - redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis
    command at an inopportune time, and can send response data to the client of an unrelated request. (This
    could, for example, happen for a non-pipeline operation.) NOTE: the solutions for CVE-2023-28859 address
    data leakage across AsyncIO connections in general. (CVE-2023-28859)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3f6d6181-79b2-4d33-bb1e-5d3f9df0c1d1 advisory.

  - redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune     time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this     CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4.3, and 4.5.3 were     released (changing the behavior for pipeline operations); however, please see CVE-2023-28859 about     addressing data leakage across AsyncIO connections in general. (CVE-2023-28858)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
250389	Linux Distros Unpatched Vulnerability : CVE-2023-28858	Nessus	Misc.	low
238907	TencentOS Server 4: python-redis (TSSA-2024:0819)	Nessus	Tencent Local Security Checks	high
408675	SCA: security update for redis (GHSA-24wv-mv5m-xv4h)	Tenable Cloud Security	SCA Checks	medium
408675	SCA: security update for redis (GHSA-24wv-mv5m-xv4h)	Tenable Self-Hosted Container Security	SCA Checks	medium
201225	SUSE SLED15: python-paramiko-doc / python-tqdm-bash-completion / etc (SUSE-SU-2024:1639-2)	Nessus	SuSE Local Security Checks	high
197047	SUSE SLED15: python-paramiko-doc / python-tqdm-bash-completion / etc (SUSE-SU-2024:1639-1)	Nessus	SuSE Local Security Checks	high
406704	Alpine: multiple py3-redis packages: security update to 4.5.4-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
406704	Alpine: multiple py3-redis packages: security update to 4.5.4-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
174290	FreeBSD : py39-redis -- can send response data to the client of an unrelated request (3f6d6181-79b2-4d33-bb1e-5d3f9df0c1d1)	Nessus	FreeBSD Local Security Checks	low

Detections

Analytics

CVE-2023-28858

medium

Tenable Plugins

low

high

medium

medium

high

high

high

high

low