Vulnerabilities > CVE-2021-3470 - Out-of-bounds Write vulnerability in Redislabs Redis

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

low complexity

redislabs

CWE-787

NVD

Published: 2021-03-31

Updated: 2021-04-05

Summary

A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use jemalloc or glibc malloc.

Vulnerable Configurations

Part	Description	Count
Application	Redislabs Redislabs Redis 1.3.6 Redislabs Redis 1.3.7 Redislabs Redis 1.3.8 Redislabs Redis 1.3.9 Redislabs Redis 1.3.10 Redislabs Redis 1.3.11 Redislabs Redis 1.3.12 Redislabs Redis 2.0.0 Redislabs Redis 2.0.1 Redislabs Redis 2.0.2 Redislabs Redis 2.0.3 Redislabs Redis 2.0.4 Redislabs Redis 2.0.5 Redislabs Redis 2.1.1 Redislabs Redis 2.2 Redislabs Redis 2.2.0 Redislabs Redis 2.2.2 Redislabs Redis 2.2.3 Redislabs Redis 2.2.4 Redislabs Redis 2.2.5 Redislabs Redis 2.2.6 Redislabs Redis 2.2.7 Redislabs Redis 2.2.8 Redislabs Redis 2.2.9 Redislabs Redis 2.2.10 Redislabs Redis 2.2.11 Redislabs Redis 2.2.12 Redislabs Redis 2.2.13 Redislabs Redis 2.2.14 Redislabs Redis 2.2.15 Redislabs Redis 2.2.105 Redislabs Redis 2.2.106 Redislabs Redis 2.2.107 Redislabs Redis 2.2.110 Redislabs Redis 2.2.111 Redislabs Redis 2.3 Redislabs Redis 2.4.0 Redislabs Redis 2.4.1 Redislabs Redis 2.4.2 Redislabs Redis 2.4.3 Redislabs Redis 2.4.4 Redislabs Redis 2.4.5 Redislabs Redis 2.4.6 Redislabs Redis 2.4.7 Redislabs Redis 2.4.8 Redislabs Redis 2.4.9 Redislabs Redis 2.4.10 Redislabs Redis 2.4.11 Redislabs Redis 2.4.12 Redislabs Redis 2.4.13 Redislabs Redis 2.4.14 Redislabs Redis 2.4.15 Redislabs Redis 2.4.16 Redislabs Redis 2.4.17 Redislabs Redis 2.4.18 Redislabs Redis 2.6.0 Redislabs Redis 2.6.1 Redislabs Redis 2.6.2 Redislabs Redis 2.6.3 Redislabs Redis 2.6.4 Redislabs Redis 2.6.5 Redislabs Redis 2.6.6 Redislabs Redis 2.6.7 Redislabs Redis 2.6.7-1 Redislabs Redis 2.6.8 Redislabs Redis 2.6.8-1 Redislabs Redis 2.6.9 Redislabs Redis 2.6.9-1 Redislabs Redis 2.6.10 Redislabs Redis 2.6.10-1 Redislabs Redis 2.6.10-2 Redislabs Redis 2.6.10-3 Redislabs Redis 2.6.11 Redislabs Redis 2.6.12 Redislabs Redis 2.6.13 Redislabs Redis 2.6.14 Redislabs Redis 2.6.14-1 Redislabs Redis 2.6.14-2 Redislabs Redis 2.6.15 Redislabs Redis 2.6.16 Redislabs Redis 2.6.17 Redislabs Redis 2.8.0 Redislabs Redis 2.8.1 Redislabs Redis 2.8.2 Redislabs Redis 2.8.3 Redislabs Redis 2.8.4 Redislabs Redis 2.8.5 Redislabs Redis 2.8.6 Redislabs Redis 2.8.7 Redislabs Redis 2.8.8 Redislabs Redis 2.8.9 Redislabs Redis 2.8.10 Redislabs Redis 2.8.11 Redislabs Redis 2.8.12 Redislabs Redis 2.8.13 Redislabs Redis 2.8.14 Redislabs Redis 2.8.15 Redislabs Redis 2.8.16 Redislabs Redis 2.8.17 Redislabs Redis 2.8.18 Redislabs Redis 2.8.19 Redislabs Redis 2.8.20 Redislabs Redis 2.8.21 Redislabs Redis 2.8.22 Redislabs Redis 2.8.23 Redislabs Redis 2.8.24 Redislabs Redis 3.0 Redislabs Redis 3.0.0 Redislabs Redis 3.0.1 Redislabs Redis 3.0.2 Redislabs Redis 3.0.3 Redislabs Redis 3.0.4 Redislabs Redis 3.0.5 Redislabs Redis 3.0.6 Redislabs Redis 3.0.7 Redislabs Redis 3.2 Redislabs Redis 3.2.0 Redislabs Redis 3.2.1 Redislabs Redis 3.2.2 Redislabs Redis 3.2.3 Redislabs Redis 3.2.4 Redislabs Redis 3.2.5 Redislabs Redis 3.2.6 Redislabs Redis 3.2.7 Redislabs Redis 3.2.8 Redislabs Redis 3.2.9 Redislabs Redis 3.2.10 Redislabs Redis 3.2.11 Redislabs Redis 3.2.12 Redislabs Redis 3.2.13 Redislabs Redis 4.0 Redislabs Redis 4.0.0 Redislabs Redis 4.0.1 Redislabs Redis 4.0.2 Redislabs Redis 4.0.3 Redislabs Redis 4.0.4 Redislabs Redis 4.0.5 Redislabs Redis 4.0.6 Redislabs Redis 4.0.7 Redislabs Redis 4.0.8 Redislabs Redis 4.0.9 Redislabs Redis 4.0.10 Redislabs Redis 4.0.11 Redislabs Redis 4.0.12 Redislabs Redis 4.0.13 Redislabs Redis 4.0.14 Redislabs Redis 5.0 Redislabs Redis 5.0.0 Redislabs Redis 5.0.1 Redislabs Redis 5.0.2 Redislabs Redis 5.0.3 Redislabs Redis 5.0.4 Redislabs Redis 5.0.5 Redislabs Redis 5.0.6 Redislabs Redis 5.0.7 Redislabs Redis 5.0.8 Redislabs Redis 5.0.9 Redislabs Redis 6.0.0 Redislabs Redis 6.0.1 Redislabs Redis 6.0.2 Redislabs Redis 6.0.3 Redislabs Redis 6.0.4 Redislabs Redis 6.0.5 Redislabs Redis 6.0.6 Redislabs Redis 6.0.7 Redislabs Redis 6.0.8 Redislabs Redis 6.2.0	236

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://bugzilla.redhat.com/show_bug.cgi?id=1943623