Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2022-24834

Опубликовано: 26 июл. 2023
Источник: msrc
CVSS3: 8.8
EPSS Средний

Описание

Heap overflow issue with the Lua cjson library used by Redis

EPSS

Процентиль: 97%
0.37948
Средний

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 7
ubuntu
больше 2 лет назад

Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.

CVSS3: 7
redhat
больше 2 лет назад

Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.

CVSS3: 7
nvd
больше 2 лет назад

Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.

CVSS3: 7
debian
больше 2 лет назад

Redis is an in-memory database that persists on disk. A specially craf ...

suse-cvrf
больше 2 лет назад

Security update for redis

EPSS

Процентиль: 97%
0.37948
Средний

8.8 High

CVSS3