CVE-2022-31144
Potential heap overflow in Redis
Résumé
Potential heap overflow in Redis
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Redis is an in-memory database that persists on disk. A specially crafted XAUTOCLAIM command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version 7.0.4.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
keydb
[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.0.4"}]}]
Bitnami
redis
[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.0.4"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2022-31144 redis Corrigé dans: 7.0.4-r0
- Debian DEBIAN-CVE-2022-31144 redis Corrigé dans: 5:7.0.4-1
Références
- advisory github.com
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory nvd.nist.gov
- advisory github.com
- web github.com