Lucene search

K
freebsdFreeBSD8EB69CD0-C2EC-11EB-B6E7-8C164567CA3C
HistoryJun 01, 2021 - 12:00 a.m.

redis -- integer overflow

2021-06-0100:00:00
vuxml.freebsd.org
30

0.019 Low

EPSS

Percentile

88.6%

Redis development team reports:

An integer overflow bug in Redis version 6.0 or newer can be
exploited using the STRALGO LCS command to corrupt the heap and
potentially result with remote code execution. This is a result
of an incomplete fix by CVE-2021-29477.