CVE-2022-35977
Fixed in a distro release EPSS 13%CVSS 5.5
Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SETRANGE` and `SORT(_RO)` commands can trigger an integer overflow, resulting with Redis attempting to allocate impossible amounts of memory and abort with an out-of-memory (OOM) panic. The problem is fixed in Redis versions 7.0.8, 6.2.9 and 6.0.17. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Products: Redis
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux:8 | redis | 6.2.17-1.module_el8.10.0+3946+3de613d5 |
| AlmaLinux:8 | redis-devel | 6.2.17-1.module_el8.10.0+3946+3de613d5 |
| AlmaLinux:8 | redis-doc | 6.2.17-1.module_el8.10.0+3946+3de613d5 |
| Alpine:v3.14 | redis | 6.2.9-r0 |
| Alpine:v3.15 | redis | 6.2.9-r0 |
| Alpine:v3.16 | redis | 7.0.8-r0 |
| Alpine:v3.17 | redis | 7.0.8-r0 |
| Alpine:v3.18 | redis | 7.0.8-r0 |
| Alpine:v3.19 | redis | 7.0.8-r0 |
| Debian:11 | redis | 5:6.0.16-1+deb11u4 |
| Debian:12 | redis | 5:7.0.8-1 |
| Debian:13 | redis | 5:7.0.8-1 |
| Debian:14 | redis | 5:7.0.8-1 |
| Red Hat:enterprise_linux:8 | redis | 0:6.2.17-1.module+el8.10.0+22680+748527fd |
| Red Hat:enterprise_linux:8 | redis-debuginfo | 0:6.2.17-1.module+el8.10.0+22680+748527fd |
| Red Hat:enterprise_linux:8 | redis-debugsource | 0:6.2.17-1.module+el8.10.0+22680+748527fd |
| Red Hat:enterprise_linux:8 | redis-devel | 0:6.2.17-1.module+el8.10.0+22680+748527fd |
| Red Hat:enterprise_linux:8 | redis-doc | 0:6.2.17-1.module+el8.10.0+22680+748527fd |
| Rocky Linux:8 | redis | 0:6.2.17-1.module+el8.10.0+1923+5b85c6a7 |
| SUSE:Enterprise Storage 7 | redis | 6.0.14-150200.6.17.1 |
| SUSE:Enterprise Storage 7.1 | redis | 6.0.14-150200.6.17.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | redis | 6.0.14-150200.6.17.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS | redis | 6.0.14-150200.6.17.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | redis | 6.0.14-150200.6.17.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP4 | redis | 6.2.6-150400.3.11.1 |
| SUSE:Linux Enterprise Real Time 15 SP3 | redis | 6.0.14-150200.6.17.1 |
| SUSE:Linux Enterprise Server 15 SP2-LTSS | redis | 6.0.14-150200.6.17.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | redis | 6.0.14-150200.6.17.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | redis | 6.0.14-150200.6.17.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | redis | 6.0.14-150200.6.17.1 |
| SUSE:Manager Proxy 4.2 | redis | 6.0.14-150200.6.17.1 |
| SUSE:Manager Retail Branch Server 4.2 | redis | 6.0.14-150200.6.17.1 |
| SUSE:Manager Server 4.2 | redis | 6.0.14-150200.6.17.1 |
| Ubuntu:Pro:14.04:LTS | redis | 2:2.8.4-2ubuntu0.2+esm3 |
| Ubuntu:Pro:16.04:LTS | redis | 2:3.0.6-1ubuntu0.4+esm2 |
| Ubuntu:Pro:18.04:LTS | redis | 5:4.0.9-1ubuntu0.2+esm4 |
| Ubuntu:Pro:20.04:LTS | redis | 5:5.0.7-2ubuntu0.1+esm2 |
| Ubuntu:Pro:22.04:LTS | redis | 5:6.0.16-1ubuntu1+esm1 |
| openSUSE:Leap 15.4 | redis | 6.2.6-150400.3.11.1 |
| openSUSE:Tumbleweed | redis | 7.0.8-1.1 |