Vulnerabilities > CVE-2021-32762 - Integer Overflow to Buffer Overflow vulnerability in multiple products

Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer overflow when parsing specially crafted large multi-bulk network replies. This is a result of a vulnerability in the underlying hiredis library which does not perform an overflow check before calling the calloc() heap allocation function. This issue only impacts systems with heap allocators that do not perform their own overflow checks. Most modern systems do and are therefore not likely to be affected. Furthermore, by default redis-sentinel uses the jemalloc allocator which is also not vulnerable. The problem is fixed in Redis versions 6.2.6, 6.0.16 and 5.0.14.

Vulnerable Configurations

Part	Description	Count
Application	Redis Redis Redis 6.2.0 Redis Redis 6.2.1 Redis Redis 6.2.2 Redis Redis 6.2.3 Redis Redis 6.2.4 Redis Redis 6.2.5 Redis Redis 6.0.0 Redis Redis 6.0.1 Redis Redis 6.0.2 Redis Redis 6.0.3 Redis Redis 6.0.4 Redis Redis 6.0.5 Redis Redis 6.0.6 Redis Redis 6.0.7 Redis Redis 6.0.8 Redis Redis 6.0.9 Redis Redis 6.0.10 Redis Redis 6.0.11 Redis Redis 6.0.12 Redis Redis 6.0.13 Redis Redis 6.0.14 Redis Redis 6.0.15 Redis Redis 5.0.0 Redis Redis 5.0.1 Redis Redis 5.0.2 Redis Redis 5.0.3 Redis Redis 5.0.4 Redis Redis 5.0.5 Redis Redis 5.0.6 Redis Redis 5.0.7 Redis Redis 5.0.8 Redis Redis 5.0.9 Redis Redis 5.0.10 Redis Redis 5.0.11 Redis Redis 5.0.12 Redis Redis 5.0.13	36
Application	Netapp Netapp Management Services FOR Element Software - Netapp Management Services FOR Netapp HCI -	2
Application	Oracle Oracle Communications Operations Monitor 4.3 Oracle Communications Operations Monitor 4.4 Oracle Communications Operations Monitor 5.0	3
OS	Debian Debian Debian Linux 10.0 Debian Debian Linux 11.0	2
OS	Fedoraproject Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35	3

Common Weakness Enumeration (CWE)

CWE-680 - Integer Overflow to Buffer Overflow

Common Attack Pattern Enumeration and Classification (CAPEC)

Buffer Overflow via Environment Variables
This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the attacker finds that they can modify an environment variable, they may try to overflow associated buffers. This attack leverages implicit trust often placed in environment variables.
Overflow Buffers
Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an attacker. As a consequence, an attacker is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the attackers' choice.
Client-side Injection-induced Buffer Overflow
This type of attack exploits a buffer overflow vulnerability in targeted client software through injection of malicious content from a custom-built hostile service.
Filter Failure through Buffer Overflow
In this attack, the idea is to cause an active filter to fail by causing an oversized transaction. An attacker may try to feed overly long input strings to the program in an attempt to overwhelm the filter (by causing a buffer overflow) and hoping that the filter does not fail securely (i.e. the user input is let into the system unfiltered).
Buffer Overflow via Symbolic Links
This type of attack leverages the use of symbolic links to cause buffer overflows. An attacker can try to create or manipulate a symbolic link file such that its contents result in out of bounds data. When the target software processes the symbolic link file, it could potentially overflow internal buffers with insufficient bounds checking.

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

References