CVE-2022-31144

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-31144

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-31144.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2022-31144

Aliases

Related

Published

2022-07-19T21:15:15Z

Modified

2024-10-12T09:39:53.677836Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Redis is an in-memory database that persists on disk. A specially crafted XAUTOCLAIM command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version 7.0.4.

References

Affected packages

Alpine:v3.16 / redis

Package

Name: redis
Purl: pkg:apk/alpine/redis?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.0.4-r0

Affected versions

2.*

2.4.14-r0

2.4.14-r1

2.4.14-r2

2.4.16-r0

2.6.16-r0

2.6.17-r0

2.8.9-r0

2.8.9-r1

2.8.9-r2

2.8.10-r0

2.8.11-r0

2.8.12-r0

2.8.13-r0

2.8.14-r0

2.8.17-r0

2.8.19-r0

3.*

3.0.0-r0

3.0.0-r1

3.0.1-r0

3.0.2-r0

3.0.3-r0

3.0.4-r0

3.0.5-r0

3.0.5-r1

3.0.6-r0

3.0.7-r0

3.0.7-r1

3.2.0-r0

3.2.1-r0

3.2.3-r0

3.2.4-r0

3.2.5-r0

3.2.7-r0

3.2.8-r0

3.2.9-r0

4.*

4.0.2-r0

4.0.2-r1

4.0.5-r0

4.0.6-r0

4.0.8-r0

4.0.9-r0

4.0.9-r1

4.0.9-r2

4.0.10-r0

4.0.10-r1

4.0.11-r0

4.0.12-r0

4.0.13-r0

5.*

5.0.4-r0

5.0.5-r0

5.0.7-r0

5.0.8-r0

5.0.9-r0

6.*

6.0.1-r0

6.0.4-r0

6.0.5-r0

6.0.9-r0

6.0.10-r0

6.2.0-r0

6.2.1-r0

6.2.2-r0

6.2.3-r0

6.2.4-r0

6.2.5-r0

6.2.6-r0

6.2.7-r0

7.*

7.0.0-r0

7.0.2-r0

Alpine:v3.17 / redis

Package

Name: redis
Purl: pkg:apk/alpine/redis?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.0.4-r0

Affected versions

2.*

2.4.14-r0

2.4.14-r1

2.4.14-r2

2.4.16-r0

2.6.16-r0

2.6.17-r0

2.8.9-r0

2.8.9-r1

2.8.9-r2

2.8.10-r0

2.8.11-r0

2.8.12-r0

2.8.13-r0

2.8.14-r0

2.8.17-r0

2.8.19-r0

3.*

3.0.0-r0

3.0.0-r1

3.0.1-r0

3.0.2-r0

3.0.3-r0

3.0.4-r0

3.0.5-r0

3.0.5-r1

3.0.6-r0

3.0.7-r0

3.0.7-r1

3.2.0-r0

3.2.1-r0

3.2.3-r0

3.2.4-r0

3.2.5-r0

3.2.7-r0

3.2.8-r0

3.2.9-r0

4.*

4.0.2-r0

4.0.2-r1

4.0.5-r0

4.0.6-r0

4.0.8-r0

4.0.9-r0

4.0.9-r1

4.0.9-r2

4.0.10-r0

4.0.10-r1

4.0.11-r0

4.0.12-r0

4.0.13-r0

5.*

5.0.4-r0

5.0.5-r0

5.0.7-r0

5.0.8-r0

5.0.9-r0

6.*

6.0.1-r0

6.0.4-r0

6.0.5-r0

6.0.9-r0

6.0.10-r0

6.2.0-r0

6.2.1-r0

6.2.2-r0

6.2.3-r0

6.2.4-r0

6.2.5-r0

6.2.6-r0

6.2.7-r0

7.*

7.0.0-r0

7.0.2-r0

7.0.3-r0

Alpine:v3.18 / redis

Package

Name: redis
Purl: pkg:apk/alpine/redis?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.0.4-r0

Affected versions

2.*

2.4.14-r0

2.4.14-r1

2.4.14-r2

2.4.16-r0

2.6.16-r0

2.6.17-r0

2.8.9-r0

2.8.9-r1

2.8.9-r2

2.8.10-r0

2.8.11-r0

2.8.12-r0

2.8.13-r0

2.8.14-r0

2.8.17-r0

2.8.19-r0

3.*

3.0.0-r0

3.0.0-r1

3.0.1-r0

3.0.2-r0

3.0.3-r0

3.0.4-r0

3.0.5-r0

3.0.5-r1

3.0.6-r0

3.0.7-r0

3.0.7-r1

3.2.0-r0

3.2.1-r0

3.2.3-r0

3.2.4-r0

3.2.5-r0

3.2.7-r0

3.2.8-r0

3.2.9-r0

4.*

4.0.2-r0

4.0.2-r1

4.0.5-r0

4.0.6-r0

4.0.8-r0

4.0.9-r0

4.0.9-r1

4.0.9-r2

4.0.10-r0

4.0.10-r1

4.0.11-r0

4.0.12-r0

4.0.13-r0

5.*

5.0.4-r0

5.0.5-r0

5.0.7-r0

5.0.8-r0

5.0.9-r0

6.*

6.0.1-r0

6.0.4-r0

6.0.5-r0

6.0.9-r0

6.0.10-r0

6.2.0-r0

6.2.1-r0

6.2.2-r0

6.2.3-r0

6.2.4-r0

6.2.5-r0

6.2.6-r0

6.2.7-r0

7.*

7.0.0-r0

7.0.2-r0

7.0.3-r0

Alpine:v3.19 / redis

Package

Name: redis
Purl: pkg:apk/alpine/redis?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.0.4-r0

Affected versions

2.*

2.4.14-r0

2.4.14-r1

2.4.14-r2

2.4.16-r0

2.6.16-r0

2.6.17-r0

2.8.9-r0

2.8.9-r1

2.8.9-r2

2.8.10-r0

2.8.11-r0

2.8.12-r0

2.8.13-r0

2.8.14-r0

2.8.17-r0

2.8.19-r0

3.*

3.0.0-r0

3.0.0-r1

3.0.1-r0

3.0.2-r0

3.0.3-r0

3.0.4-r0

3.0.5-r0

3.0.5-r1

3.0.6-r0

3.0.7-r0

3.0.7-r1

3.2.0-r0

3.2.1-r0

3.2.3-r0

3.2.4-r0

3.2.5-r0

3.2.7-r0

3.2.8-r0

3.2.9-r0

4.*

4.0.2-r0

4.0.2-r1

4.0.5-r0

4.0.6-r0

4.0.8-r0

4.0.9-r0

4.0.9-r1

4.0.9-r2

4.0.10-r0

4.0.10-r1

4.0.11-r0

4.0.12-r0

4.0.13-r0

5.*

5.0.4-r0

5.0.5-r0

5.0.7-r0

5.0.8-r0

5.0.9-r0

6.*

6.0.1-r0

6.0.4-r0

6.0.5-r0

6.0.9-r0

6.0.10-r0

6.2.0-r0

6.2.1-r0

6.2.2-r0

6.2.3-r0

6.2.4-r0

6.2.5-r0

6.2.6-r0

6.2.7-r0

7.*

7.0.0-r0

7.0.2-r0

7.0.3-r0

Debian:12 / redis

Package

Name: redis
Purl: pkg:deb/debian/redis?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5:7.0.4-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / redis

Package

Name: redis
Purl: pkg:deb/debian/redis?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5:7.0.4-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/redis/redis

Affected ranges

Type: GIT
Repo: https://github.com/redis/redis
Events: Introduced

d375595d5e3ae2e5c29e6c00a2dc3d60578fd9fc

Fixed

888effe4beb2c0ac8de1c863e635e45af3d3b329

Affected versions

7.*

7.0.0

7.0.1

7.0.2

7.0.3