Integer overflow in certain command arguments can drive Redi… (CVE-2022-35977)

Résumé

Integer overflow in certain command arguments can drive Redis to OOM panic

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted SETRANGE and SORT(_RO) commands can trigger an integer overflow, resulting with Redis attempting to allocate impossible amounts of memory and abort with an out-of-memory (OOM) panic. The problem is fixed in Redis versions 7.0.8, 6.2.9 and 6.0.17. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami keydb

[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.0.17"},{"introduced":"6.2.0"},{"fixed":"6.2.9"},{"introduced":"7.0.0"},{"fixed":"7.0.8"}]}]

Bitnami redis

[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.0.17"},{"introduced":"6.2.0"},{"fixed":"6.2.9"},{"introduced":"7.0.0"},{"fixed":"7.0.8"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Alpine Linux ALPINE-CVE-2022-35977 redis Corrigé dans: 6.2.9-r0
Debian DEBIAN-CVE-2022-35977 redis Corrigé dans: 5:6.0.16-1+deb11u4

Références

advisory github.com
advisory github.com
advisory github.com
advisory github.com
advisory github.com
web nvd.nist.gov
web lists.debian.org