CVE-2022-35977CWE-190

Integer overflow in certain command arguments can drive Redis to OOM panic

Medium · published January 20, 2023

CVSS v3.1

5.5

EPSS

13%

Percentile

96.4

In the wild

Unconfirmed

What it is

Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SETRANGE` and `SORT(_RO)` commands can trigger an integer overflow, resulting with Redis attempting to allocate impossible amounts of memory and abort with an out-of-memory (OOM) panic. The problem is fixed in Redis versions 7.0.8, 6.2.9 and 6.0.17. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The record

Technical detail

CVSS v3.1: 5.5 · MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.13453 · 96.4th percentile
Weakness: CWE-190 · Integer Overflow or Wraparound
Published: 2023-01-20T18:19Z

EPSS history

Timeline

20 JAN 18:19Z
Integer overflow in certain command arguments can drive Redis to OOM panic
cvelistv5