CVE-2022-35951
Fixed in a distro release EPSS 4%CVSS 7.0
Redis is an in-memory database that persists on disk. Versions 7.0.0 and above, prior to 7.0.5 are vulnerable to an Integer Overflow. Executing an `XAUTOCLAIM` command on a stream key in a specific state, with a specially crafted `COUNT` argument may cause an integer overflow, a subsequent heap overflow, and potentially lead to remote code execution. This has been patched in Redis version 7.0.5. No known workarounds exist.
Products: Redis
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine:v3.16 | redis | 7.0.5-r0 |
| Alpine:v3.17 | redis | 7.0.5-r0 |
| Alpine:v3.18 | redis | 7.0.5-r0 |
| Alpine:v3.19 | redis | 7.0.5-r0 |
| Debian:12 | redis | 5:7.0.5-1 |
| Debian:13 | redis | 5:7.0.5-1 |
| Debian:14 | redis | 5:7.0.5-1 |
| Ubuntu:24.04:LTS | redis | 5:7.0.12-1 |
| openSUSE:Tumbleweed | redis | 7.0.5-1.1 |