CVE-2021-32762

🗓️ 04 Oct 2021 18:00:11Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 463 Views

Redis open source database vulnerable to integer overflow in redis-cli and redis-sentinel due to underlying hiredis library. Fixed in Redis 6.2.6, 6.0.16, 5.0.14

Reporter	Title	Published	Views	Family All 119
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Redis may affect IBM Robotic Process Automation for Cloud Pak	27 Jun 202319:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Redis affects IBM Event Streams (CVE-2021-32762)	6 Jan 202209:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Redis affects IBM Event Streams (CVE-2021-32762)	6 Jan 202209:34	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilities in Redis affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	22 Jun 202209:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	6 Oct 202204:10	–	ibm
FreeBSD	redis -- multiple vulnerabilities	4 Oct 202100:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : redis (ALASREDIS6-2023-007)	27 Sep 202300:00	–	nessus
Tenable Nessus	Debian DLA-2810-1 : redis - LTS security update	5 Nov 202100:00	–	nessus
Tenable Nessus	Debian DSA-5001-1 : redis - security update	6 Nov 202100:00	–	nessus
Tenable Nessus	FreeBSD : redis -- multiple vulnerabilities (9b4806c1-257f-11ec-9db5-0800270512f4)	6 Oct 202100:00	–	nessus

NVD

Vulners

Node

redis redisRange5.0.0–5.0.14

redis redisRange6.0.0–6.0.16

redis redisRange6.2.0–6.2.6

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Node

fedoraproject fedoraMatch33

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

Node

netapp management_services_for_element_softwareMatch-

netapp management_services_for_netapp_hciMatch-

Node

oracle communications_operations_monitorMatch4.3

oracle communications_operations_monitorMatch4.4

oracle communications_operations_monitorMatch5.0

[
  {
    "product": "redis",
    "vendor": "redis",
    "versions": [
      {
        "status": "affected",
        "version": "< 5.0.14"
      },
      {
        "status": "affected",
        "version": ">= 6.0.0, < 6.0.16"
      },
      {
        "status": "affected",
        "version": ">= 6.2.0, < 6.2.6"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20211104-0003/
github	www.github.com/redis/redis/security/advisories/GHSA-833w-8v3m-8wwr
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WR5WKJWXD4D6S3DJCZ56V74ESLTDQRAB/
debian	www.debian.org/security/2021/dsa-5001
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VL5KXFN3ATM7IIM7Q4O4PWTSRGZ5744Z/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HTYQ5ZF37HNGTZWVNJD3VXP7I6MEEF42/
github	www.github.com/redis/redis/commit/0215324a66af949be39b34be2d55143232c1cb71
security	www.security.gentoo.org/glsa/202209-17
oracle	www.oracle.com/security-alerts/cpuapr2022.html

21 Nov 2024 06:07Current

8High risk

Vulners AI Score8

CVSS 3.17.5 - 8.8

CVSS 29

EPSS0.00869