Vulnerability · Published Jun 22, 2022 · Assigned by mitre
CVE-2022-33105
High 7.5
In plain English
A high-severity security flaw in the redis package (Ubuntu). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.1% (higher than 88% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)3.1%top 12.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu:24.04:LTS | redis | 5:7.0.12-1 | UBUNTU-CVE-2022-33105 |
Affected products (as reported)
References
- https://github.com/redis/redis/commit/4a7a4e42db8ff757cdf3f4a824f66426036034ef x_refsource_MISC
- https://github.com/redis/redis/pull/10753 x_refsource_MISC
- https://raw.githubusercontent.com/redis/redis/7.0.1/00-RELEASENOTES x_refsource_MISC
- https://github.com/redis/redis/pull/10829 x_refsource_MISC
- https://security.netapp.com/advisory/ntap-20220729-0005/ x_refsource_CONFIRM
- GLSA-202209-17 vendor-advisory, x_refsource_GENTOO