The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2925-1 advisory.

    - CVE-2022-24834: Fixed heap overflow in the cjson and cmsgpack libraries (bsc#1213193).
      - CVE-2023-28856: Fixed HINCRBYFLOAT invalid key crash (bsc#1210548).
      - CVE-2022-36021: Fixed integer overflow via Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD     (bsc#1208790).
      - CVE-2023-25155: Fixed Integer Overflow in RAND commands (bsc#1208793).
      - CVE-2023-28425: Fixed denial-of-service via Specially crafted MSETNX command (bsc#1209528).
      - CVE-2023-36824: Fixed heap overflow in COMMAND GETKEYS and ACL evaluation (bsc#1213249).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES15 / openSUSE 15 Security Update : redis7 (SUSE-SU-2023:2925-1)

high Nessus Plugin ID 178690

Version 1.1

Version 1.0

Version 1.1 Jun 26, 2026, 4:08 PM Plugin metadata Plugin Feed: 202606261608
Version 1.0 Jul 21, 2023, 8:03 AM New Plugin Feed: 202307210803