Vulnerability · Published Oct 4, 2021 · Assigned by GitHub_M

CVE-2021-32762Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms

High 7.5

In plain English

A high-severity integer overflow in redis from redis. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 85% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)2.6%top 14.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer overflow when parsing specially crafted large multi-bulk network replies. This is a result of a vulnerability in the underlying hiredis library which does not perform an overflow check before calling the calloc() heap allocation function. This issue only impacts systems with heap allocators that do not perform their own overflow checks. Most modern systems do and are therefore not likely to be affected. Furthermore, by default redis-sentinel uses the jemalloc allocator which is also not vulnerable. The problem is fixed in Redis versions 6.2.6, 6.0.16 and 5.0.14.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Alpine:v3.20	redis	6.2.6-r0	ALPINE-CVE-2021-32762
Alpine:v3.21	redis	6.2.6-r0	ALPINE-CVE-2021-32762
Alpine:v3.22	redis	6.2.6-r0	ALPINE-CVE-2021-32762
Alpine:v3.23	redis	6.2.6-r0	ALPINE-CVE-2021-32762
Alpine:v3.24	redis	6.2.6-r0	ALPINE-CVE-2021-32762
Debian:12	redis	5:6.0.16-1	DEBIAN-CVE-2021-32762
Debian:13	redis	5:6.0.16-1	DEBIAN-CVE-2021-32762
Debian:14	redis	5:6.0.16-1	DEBIAN-CVE-2021-32762

Affected products (as reported)

Vendor	Product	Versions
redis	redis	< 5.0.14>= 6.0.0, < 6.0.16>= 6.2.0, < 6.2.6

Weakness: CWE-190, CWE-680 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://github.com/redis/redis/security/advisories/GHSA-833w-8v3m-8wwr x_refsource_CONFIRM
https://github.com/redis/redis/commit/0215324a66af949be39b34be2d55143232c1cb71 x_refsource_MISC
FEDORA-2021-8913c7900c vendor-advisory, x_refsource_FEDORA
FEDORA-2021-61c487f241 vendor-advisory, x_refsource_FEDORA
FEDORA-2021-aa94492a09 vendor-advisory, x_refsource_FEDORA
DSA-5001 vendor-advisory, x_refsource_DEBIAN
https://www.oracle.com/security-alerts/cpuapr2022.html x_refsource_MISC
https://security.netapp.com/advisory/ntap-20211104-0003/ x_refsource_CONFIRM
GLSA-202209-17 vendor-advisory, x_refsource_GENTOO