CVE-2023-41056
Redis vulnerable to integer overflow in certain payloads
Résumé
Redis vulnerable to integer overflow in certain payloads
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
keydb
[{"type":"SEMVER","events":[{"introduced":"7.0.9"},{"fixed":"7.0.15"},{"introduced":"7.2.0"},{"fixed":"7.2.4"}]}]
Bitnami
redis
[{"type":"SEMVER","events":[{"introduced":"7.0.9"},{"fixed":"7.0.15"},{"introduced":"7.2.0"},{"fixed":"7.2.4"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-41056 redis Corrigé dans: 5:7.0.15-1~deb12u1
Références
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- web github.com
- web github.com
- web security.netapp.com
- web nvd.nist.gov