CVE-2022-31144

🗓️ 19 Jul 2022 20:15:13Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 138 Views

Redis in-memory database 7.x prior to 7.0.4 allows heap overflow and potential remote code execution via `XAUTOCLAIM` command on a stream key

Reporter	Title	Published	Views	Family All 56
FreeBSD	redis -- Potential remote code execution vulnerability	18 Jul 202200:00	–	freebsd
AlpineLinux	CVE-2022-31144	19 Jul 202220:15	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в redis	20 May 202605:53	–	astralinux
CBLMariner	CVE-2022-31144 affecting package redis for versions less than 6.2.9-1	24 Feb 202301:54	–	cbl_mariner
CBLMariner	CVE-2022-31144 affecting package redis 6.2.7-1	2 Mar 202304:18	–	cbl_mariner
Circl	CVE-2022-31144	20 Jul 202200:41	–	circl
CNNVD	Redis Labs Redis 缓冲区错误漏洞	19 Jul 202200:00	–	cnnvd
Cvelist	CVE-2022-31144 Potential heap overflow in Redis	19 Jul 202220:15	–	cvelist
Debian CVE	CVE-2022-31144	19 Jul 202220:15	–	debiancve
EUVD	EUVD-2022-52768	19 Jul 202220:15	–	euvd

NVD

Vulners

Node

redis redisRange7.0–7.0.4

[
  {
    "product": "redis",
    "vendor": "redis",
    "versions": [
      {
        "status": "affected",
        "version": ">= 7.0.0, < 7.0.4"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20220909-0002/
github	www.github.com/redis/redis/releases/tag/7.0.4
github	www.github.com/redis/redis/security/advisories/GHSA-96f7-42fg-2jrh
security	www.security.gentoo.org/glsa/202209-17