FreshPorts - VuXML

Huang Zhw reports:

On 32-bit versions, Redis BITFIELD command is vulnerable to integer overflow that can potentially be exploited to corrupt the heap, leak arbitrary heap contents or trigger remote code execution. The vulnerability involves constructing specially crafted bit commands which overflow the bit offset.

This problem only affects 32-bit versions of Redis.

< 6.0.15

< 6.2.5

< 5.0.13

The Redis Team reports:

CVE-2021-41099

Integer to heap buffer overflow handling certain string commands and network payloads, when proto-max-bulk-len is manually configured.

CVE-2021-32762

Integer to heap buffer overflow issue in redis-cli and redis-sentinel parsing large multi-bulk replies on some older and less common platforms.

CVE-2021-32687

Integer to heap buffer overflow with intsets, when set-max-intset-entries is manually configured to a non-default, very large value.

CVE-2021-32675

Denial Of Service when processing RESP request payloads with a large number of elements on many connections.

CVE-2021-32672

Random heap reading issue with Lua Debugger.

CVE-2021-32628

Integer to heap buffer overflow handling ziplist-encoded data types, when configuring a large, non-default value for hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries or zset-max-ziplist-value.

CVE-2021-32627

Integer to heap buffer overflow issue with streams, when configuring a non-default, large value for proto-max-bulk-len and client-query-buffer-limit.

CVE-2021-32626

Specially crafted Lua scripts may result with Heap buffer overflow.

< 7.0.0.20211005

< 6.2.6

< 6.0.16

< 5.0.14