Integer Overflow

🗓️ 13 Jan 2024 04:09:35Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 26 Views

Redis sid integer overflow vulnerability due to proto-max-bulk-len configuration paramete

Reporter	Title	Published	Views	Family All 119
Tenable Nessus	Amazon Linux 2023 : redis6, redis6-devel (ALAS2023-2024-516)	6 Feb 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : redis6, redis6-devel (ALAS2023-2024-528)	20 Feb 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : redis6, redis6-devel (ALAS2023-2024-538)	20 Feb 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : redis (ALASREDIS6-2024-009)	6 Feb 202400:00	–	nessus
Tenable Nessus	Debian dsa-5610 : redis - security update	30 Jan 202400:00	–	nessus
Tenable Nessus	Fedora 38 : redis (2024-694899d442)	18 Jan 202400:00	–	nessus
Tenable Nessus	Fedora 39 : redis (2024-6ef42a28c9)	18 Jan 202400:00	–	nessus
Tenable Nessus	GLSA-202408-05 : Redis: Multiple Vulnerabilities	7 Aug 202400:00	–	nessus
Tenable Nessus	Photon OS 4.0: Redis PHSA-2024-4.0-0553	24 Jul 202400:00	–	nessus
Tenable Nessus	Photon OS 5.0: Redis PHSA-2024-5.0-0194	24 Jul 202400:00	–	nessus

Vulners

Node

redis redisMatch5:6.0.9-1debian

AND

redis redisMatch5:6.0.15-1debian

AND

debian debian_linuxMatch999

redis redisMatch7.0.12-r0os

AND

redis redisMatch7.0.13-r0os

AND

redis redisMatch7.0.11-r0os

AND

redis redisMatch7.0.14-r0os

AND

alpinelinux alpine_linuxMatch3.18

redis redisMatch7.0.11-r0os

AND

redis redisMatch7.0.4-r1os

AND

redis redisMatch7.0.8-r0os

AND

redis redisMatch7.0.0-r0os

AND

redis redisMatch6.2.6-r0os

AND

redis redisMatch7.0.9-r0os

AND

redis redisMatch7.0.4-r0os

AND

redis redisMatch7.0.5-r0os

AND

redis redisMatch7.0.12-r0os

AND

redis redisMatch7.0.10-r0os

AND

redis redisMatch7.0.2-r0os

AND

redis redisMatch7.0.13-r0os

AND

redis redisMatch6.2.7-r0os

AND

redis redisMatch7.0.14-r0os

AND

alpinelinux alpine_linuxMatch3.16

redis redisMatch7.0.9-r0os

AND

redis redisMatch7.0.12-r0os

AND

redis redisMatch7.0.8-r0os

AND

redis redisMatch7.0.13-r0os

AND

redis redisMatch7.0.10-r0os

AND

redis redisMatch7.0.5-r0os

AND

redis redisMatch7.0.11-r0os

AND

redis redisMatch7.0.7-r0os

AND

redis redisMatch7.0.14-r0os

AND

alpinelinux alpine_linuxMatch3.17

redis redisMatch7.2.3-r0os

AND

redis redisMatch7.2.2-r0os

AND

alpinelinux alpine_linuxMatch3.19

redis redisMatch7.0.4-r0os

AND

redis redisMatch6.2.7-r0os

AND

redis redisMatch7.0.11-r0os

AND

redis redisMatch6.2.4-r0os

AND

redis redisMatch7.0.8-r0os

AND

redis redisMatch5.0.9-r0os

AND

redis redisMatch6.2.3-r0os

AND

redis redisMatch7.2.3-r0os

AND

redis redisMatch7.0.12-r0os

AND

redis redisMatch7.0.9-r0os

AND

redis redisMatch6.2.1-r0os

AND

redis redisMatch5.0.7-r0os

AND

redis redisMatch6.2.6-r0os

AND

redis redisMatch7.0.4-r1os

AND

redis redisMatch7.0.4-r2os

AND

redis redisMatch7.0.7-r0os

AND

redis redisMatch7.2.2-r0os

AND

redis redisMatch7.0.5-r0os

AND

redis redisMatch7.0.10-r0os

AND

redis redisMatch7.0.3-r0os

AND

redis redisMatch6.0.1-r0os

AND

redis redisMatch7.0.2-r0os

AND

redis redisMatch7.0.0-r0os

AND

redis redisMatch7.2.1-r0os

AND

redis redisMatch7.2.0-r0os

AND

redis redisMatch6.2.5-r0os

AND

redis redisMatch7.0.10-r1os

AND

redis redisMatch5.0.8-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-41056
github	www.github.com/redis/redis/releases/tag/7.0.15
github	www.github.com/redis/redis/releases/tag/7.2.4
github	www.github.com/redis/redis/security/advisories/GHSA-xr47-pcmx-fq2m
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/3JTGQJ2YLYB24B72I5B5H32YIMPVSWIT/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/JTWHPLC3RI67VNRDOIXLDVNC5YMYBMQN/
security	www.security.netapp.com/advisory/ntap-20240223-0003/

23 Feb 2024 17:50Current

7.8High risk

Vulners AI Score7.8

CVSS 3.18.1

EPSS0.02582