PT-2022-37403 · Redis · Redis

Published 2022-06-23 · Updated 2022-06-23

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Redis version 7.0

Description A memory leak was discovered in Redis via the component streamGetEdgeID.

Recommendations For Redis version 7.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

PYSEC-2022-43162

Affected Products

Redis

References · 7

• https://osv.dev/vulnerability/PYSEC-2022-43162 · Vendor Advisory
• https://github.com/redis/redis/pull/10753 · Note
• https://github.com/redis/redis/pull/10829 · Note
• https://github.com/redis/redis/commit/4a7a4e42db8ff757cdf3f4a824f66426036034ef · Note
• https://raw.githubusercontent.com/redis/redis/7.0.1/00-RELEASENOTES · Note
• https://security.gentoo.org/glsa/202209-17 · Note
• https://security.netapp.com/advisory/ntap-20220729-0005 · Note