CVE-2022-35951CWE-190

Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow

High · published September 23, 2022

CVSS v3.1
7.0
EPSS
4%
Percentile
90.2
In the wild
Unconfirmed
What it is

Redis is an in-memory database that persists on disk. Versions 7.0.0 and above, prior to 7.0.5 are vulnerable to an Integer Overflow. Executing an `XAUTOCLAIM` command on a stream key in a specific state, with a specially crafted `COUNT` argument may cause an integer overflow, a subsequent heap overflow, and potentially lead to remote code execution. This has been patched in Redis version 7.0.5. No known workarounds exist.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03906 · 90.2th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2022-09-23T00:00Z
EPSS history
Timeline
  • 23 SEP 00:00Z
    Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow
    cvelistv5