PT-2022-5320 · Redis+1 · Redis+1

J0O1Ey · Published 2022-10-28 · Updated 2024-08-03 · CVE-2022-3734

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Redis (affected versions not specified)

Description A critical vulnerability was found in a port or fork of Redis, affecting the dbghelp.dll library. The issue is related to an uncontrolled search path, which can be exploited remotely. The exploit has been disclosed, but the existence of this vulnerability is still disputed. This issue might affect an unofficial fork or port on Windows only.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

BDU:2022-06625

BIT-REDIS-2022-3734

CVE-2022-3734

Affected Products

Redis

Dbghelp.Dll

References · 10

• https://osv.dev/vulnerability/UBUNTU-CVE-2022-3734 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3734 · Security Note
• https://osv.dev/vulnerability/CVE-2022-3734 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3734 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-06625 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-3734 · Security Note
• https://t.me/cvenotify/88678 · Telegram Post
• https://cnblogs.com/J0o1ey/p/16829380.html · Note
• https://t.me/cvenotify/38633 · Telegram Post
• https://vuldb.com/?id.212416 · Note