Lucene search

K
freebsdFreeBSD1606B03B-AC57-11EB-9BDD-8C164567CA3C
HistoryMay 03, 2021 - 12:00 a.m.

redis -- multiple vulnerabilities

2021-05-0300:00:00
vuxml.freebsd.org
50
redis
stralgo lcs
copy command
integer overflow
heap corruption
remote code execution
large intsets
configuration value
rdb payload
dump payload
unix

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.019

Percentile

88.7%

Redis project reports:

Vulnerability in the STRALGO LCS command

      An integer overflow bug in Redis version 6.0 or newer could be
      exploited using the STRALGO LCS command to corrupt the heap and
      potentially result with remote code execution.

Vulnerability in the COPY command for large intsets

      An integer overflow bug in Redis 6.2 could be exploited to corrupt
      the heap and potentially result with remote code execution.
      The vulnerability involves changing the default set-max-intset-entries
      configuration value, creating a large set key that consists of
      integer values and using the COPY command to duplicate it.
      The integer overflow bug exists in all versions of Redis starting
      with 2.6, where it could result with a corrupted RDB or DUMP payload,
      but not exploited through COPY (which did not exist before 6.2).

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.019

Percentile

88.7%