Ubuntu.comUB:CVE-2022-31144CVE-2022-31144
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.006 Low
EPSS
Percentile
78.5%
Redis is an in-memory database that persists on disk. A specially crafted
XAUTOCLAIM command on a stream key in a specific state may result with
heap overflow, and potentially remote code execution. This problem affects
versions on the 7.x branch prior to 7.0.4. The patch is released in version
7.0.4.
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.006 Low
EPSS
Percentile
78.5%