Описание
Certain sequence of payloads may lead to remote code execution
Impact
In some cases, Redis may incorrectly handle resizing of memory buffers which can result in incorrect accounting of buffer sizes and lead to heap overflow and potential remote code execution.
The problem exists in Redis 7.0.9 or newer (including 7.2.x).
Patches
The problem is fixed in Redis 7.0.15 and 7.2.4.
For more information
If you have any questions or comments about this advisory:
- Open an issue in the Redis repository
- Email us at redis@redis.io
Пакеты
redis
>=7.0.9, <7.0.15
7.0.15
redis
>=7.2.0, <7.2.4
7.2.4
Связанные уязвимости
Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.
Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.
Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.
Redis is an in-memory database that persists on disk. Redis incorrectl ...
Уязвимость системы управления базами данных (СУБД) Redis, связанная с целочисленным переполнением, позволяющая нарушителю выполнить произвольный код