EUVD-2021-19533

Malware in sbrugna...

Redis input validation error vulnerability

Hiredis is a C client for Redis databases. Hiredis suffers from a security vulnerability that allows attackers to provide maliciously crafted or corrupted RESP, mult-bulk protocol data that can lead to integer overflows. No detailed vulnerability details are currently available...

PT-2021-19914

Name of the Vulnerable Software and Affected Versions Hiredis affected versions not specified Description The issue arises from an integer overflow when Hiredis is provided with maliciously crafted or corrupted RESP mult-bulk protocol data. Specifically, when parsing multi-bulk array-like replies...

CVE-2021-32765: Integer Overflow or Wraparound

Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted RESP mult-bulk protocol data. When parsing multi-bulk array-like replies, hiredis fails to check if count sizeofredisReply...