PT-2021-7736 · Redis+5 · Redis+5

Omri Ben-Bassat · Published 2021-02-25 · Updated 2024-06-15 · CVE-2021-21309

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Redis versions 4.0 through 6.1 Redis versions prior to 5.0.11 Redis versions prior to 6.0.11 Redis version 6.2

Description The issue is related to an integer overflow bug in 32-bit Redis versions 4.0 or newer, which could be exploited to corrupt the heap and potentially result in remote code execution. By default, authenticated Redis users have access to all configuration parameters and can change the safe default, making the system vulnerable. This problem only affects 32-bit Redis. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For Redis versions 4.0 through 6.1, update to version 6.2 or newer. For Redis versions prior to 5.0.11, update to version 5.0.11 or newer. For Redis versions prior to 6.0.11, update to version 6.0.11 or newer. As a temporary workaround, consider preventing clients from directly executing CONFIG SET by using ACL configuration to block the command in Redis 6.0 or newer, or by using the rename-command configuration directive to rename the command to a random string unknown to users in older versions.

Fix

RCE

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2021-1809

ALT-PU-2021-2093

ALT-PU-2023-4109

AZL-6843

BDU:2023-02181

CVE-2021-21309

DLA-2576-1

GHSA-HGJ8-VFF2-7CJF

MGASA-2021-0155

MGASA-2021-0317

OESA-2021-1093

OPENSUSE-SU-2021:0682-1

OPENSUSE-SU-2021_0682-1

OPENSUSE-SU-2024:11299-1

SUSE-SU-2021:1652-1

SUSE-SU-2021_1652-1

USN-5221-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Redis

Suse

Ubuntu

References · 59

• https://github.com/redis/redis/pull/8522 · Patch
• https://github.com/redis/redis/commit/c992857618db99776917f10bf4f2345a5fdc78b0 · Patch
• https://ubuntu.com/security/CVE-2021-32687 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02181 · Security Note
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20230412SE16MD · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0682-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-41099 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21309 · Security Note
• https://ubuntu.com/security/CVE-2021-32761 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:1652-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-21309 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32675 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-21309 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1093 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11299-1 · Vendor Advisory