CVE-2023-41056
Redis vulnerable to integer overflow in certain payloads
Summary
Redis vulnerable to integer overflow in certain payloads
Original description
The description as published by the source.
Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
keydb
[{"type":"SEMVER","events":[{"introduced":"7.0.9"},{"fixed":"7.0.15"},{"introduced":"7.2.0"},{"fixed":"7.2.4"}]}]
Bitnami
redis
[{"type":"SEMVER","events":[{"introduced":"7.0.9"},{"fixed":"7.0.15"},{"introduced":"7.2.0"},{"fixed":"7.2.4"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-41056 redis Fixed in: 5:7.0.15-1~deb12u1
References
- advisory github.com
- advisory security.netapp.com
- advisory nvd.nist.gov
- advisory github.com
- web github.com
- web github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org