このページは Debian 向けの修正状況です。脆弱性そのものの説明は CVE 本体のページにあります。
CVE-2021-3470 の詳細 →
DEBIAN-CVE-2021-3470
A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or g...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use jemalloc or glibc malloc.
出典: OSV.dev (Open Source Vulnerabilities) OSV
影響パッケージ
Debian:12
redis
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.9-1"}]}]
Debian:13
redis
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.9-1"}]}]
Debian:14
redis
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.9-1"}]}]
参照URL
- advisory security-tracker.debian.org