Integer overflow in certain command arguments can drive Redis to OOM panic
Summary
Integer overflow in certain command arguments can drive Redis to OOM panic
Original description
The description as published by the source.
Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted SETRANGE and SORT(_RO) commands can trigger an integer overflow, resulting with Redis attempting to allocate impossible amounts of memory and abort with an out-of-memory (OOM) panic. The problem is fixed in Redis versions 7.0.8, 6.2.9 and 6.0.17. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2022-35977 redis Fixed in: 6.2.9-r0
- Debian DEBIAN-CVE-2022-35977 redis Fixed in: 5:6.0.16-1+deb11u4
References
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- web github.com
- web github.com
- web github.com
- web lists.debian.org