CVE-2021-3470CWE-119

A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's…

published March 31, 2021

CVSS
—
EPSS
1%
Percentile
66.5
In the wild
Unconfirmed
What it is

A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use jemalloc or glibc malloc.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01144 · 66.5th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2021-03-31T13:44Z
EPSS history
Timeline
  • 31 MAR 13:44Z
    A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's…
    cvelistv5