The vulnerability of the Redis database management system, related to pointer assignment errors, allows attackers to trigger a service failure.

🗓️ 17 May 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Redis pointer assignment error allows attacker to trigger service failure with a crafted Lua script.

Reporter	Title	Published	Views	Family All 147
IBM Security Bulletins	Security Bulletin: IBM QRadar Advisor With Watson App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	30 May 202318:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Redis affect IBM Event Streams (CVE-2022-24736, CVE-2022-24735)	30 Sep 202213:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected but not considered vulnerable to multiple vulnerabilities	26 Mar 202504:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	29 Jan 202520:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Redis affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift (CVE-2022-24736, CVE-2022-24735)	13 Dec 202215:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway affected by vulnerabilities in Redis	29 Jul 202220:03	–	ibm
Tenable Nessus	Amazon Linux 2022 : redis6, redis6-devel (ALAS2022-2022-115)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : redis6, redis6-devel (ALAS2022-2022-199)	5 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : redis6, redis6-devel (ALAS2023-2023-064)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : redis (ALASREDIS6-2023-003)	27 Sep 202300:00	–	nessus

Vulners

Node

redis_labs redisRange<6.2.7

OR

redis_labs redisRange<7.0.0

OR

red_hat red_hat_enterprise_linuxMatch8

OR

fedora fedoraMatch34

OR

fedora fedoraMatch35

OR

fedora fedoraMatch36

Source	Link
github	www.github.com/redis/redis/pull/10651
github	www.github.com/redis/redis/releases/tag/6.2.7
github	www.github.com/redis/redis/releases/tag/7.0.0
github	www.github.com/redis/redis/security/advisories/GHSA-3qpw-7686-5984
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-24736
access	www.access.redhat.com/security/cve/cve-2022-24736
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-24736
bodhi	www.bodhi.fedoraproject.org/updates/FEDORA-2022-a0a4c7eb31
bodhi	www.bodhi.fedoraproject.org/updates/FEDORA-2022-6ed1ce2838
bodhi	www.bodhi.fedoraproject.org/updates/FEDORA-2022-44373f6778

13 Sep 2024 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 21.7

CVSS 33.3

EPSS0.01498

Redis Pointer assignment error Crafted Lua script Service failure