Lucene search
FreeBSD871D93F9-06AA-11ED-8D5F-080027F5FEC9HistoryJul 18, 2022 - 12:00 a.m.
redis -- Potential remote code execution vulnerability
2022-07-1800:00:00
vuxml.freebsd.org
129
redis
remote code execution
heap overflow
xautoclaim command
stream key
unix
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.008
Percentile
82.5%
The Redis core team reports:
A specially crafted XAUTOCLAIM command on a stream key in
a specific state may result with heap overflow, and
potentially remote code execution.
Related
cvelist
cvelist
CVE-2022-31144 Potential heap overflow in Redis
2022-07-19 20:15:13
prion
prion
Null pointer dereference
2022-07-19 21:15:00
osv
osv
BIT-keydb-2022-31144
2024-08-22 19:26:49
redis-7.0.4-1.1 on GA media
2024-06-15 00:00:00
BIT-redis-2022-31144
2024-03-06 11:05:57
nessus
nessus
FreeBSD : redis -- Potential remote code execution vulnerability (871d93f9-06aa-11ed-8d5f-080027f5fec9)
2022-07-18 00:00:00
Photon OS 4.0: Redis PHSA-2022-4.0-0230
2024-07-23 00:00:00
GLSA-202209-17 : Redis: Multiple Vulnerabilities
2022-09-29 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2022-07-23 04:47:33
openvas
openvas
Redis 7.0.x < 7.0.4 RCE Vulnerability
2022-07-20 00:00:00
cve
cve
CVE-2022-31144
2022-07-19 21:15:15
redhatcve
redhatcve
CVE-2022-31144
2022-11-08 06:15:45
cbl_mariner
cbl_mariner
CVE-2022-31144 affecting package redis 6.2.7-1
2023-03-02 04:18:33
CVE-2022-31144 affecting package redis for versions less than 6.2.9-1
2023-02-24 01:54:33
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Redis
2023-02-03 08:40:38
debiancve
debiancve
CVE-2022-31144
2022-07-19 21:15:15
alpinelinux
alpinelinux
CVE-2022-31144
2022-07-19 21:15:15
ubuntucve
ubuntucve
CVE-2022-31144
2022-07-19 00:00:00
nvd
nvd
CVE-2022-31144
2022-07-19 21:15:15
photon
photon
Important Photon OS Security Update - PHSA-2022-0230
2022-08-17 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0230
2022-08-17 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2296
2023-11-21 12:45:37
gentoo
gentoo
Redis: Multiple Vulnerabilities
2022-09-29 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.008
Percentile
82.5%
Related for 871D93F9-06AA-11ED-8D5F-080027F5FEC9