阿里云漏洞库

漏洞描述

Redis is an in-memory database that persists on disk. Authenticated users can issue a `HRANDFIELD` or `ZRANDMEMBER` command with specially crafted arguments to trigger a denial-of-service by crashing Redis with an assertion failure. This problem affects Redis versions 6.2 or newer up to but not including 6.2.9 as well as versions 7.0 up to but not including 7.0.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://github.com/redis/redis/commit/16f408b1a0121cacd44cbf8aee275d69dc627f02
https://github.com/redis/redis/releases/tag/6.2.9
https://github.com/redis/redis/releases/tag/7.0.8
https://github.com/redis/redis/security/advisories/GHSA-r8w2-2m53-gprj

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	redis	redis	*	From (including) 6.2.0	Up to (excluding) 6.2.9
	运行在以下环境
	应用	redis	redis	*	From (including) 7.0.0	Up to (excluding) 7.0.8
	运行在以下环境
	系统	alpine_3.14	redis	*		Up to (excluding) 6.2.9-r0
	运行在以下环境
	系统	alpine_3.15	redis	*		Up to (excluding) 6.2.9-r0
	运行在以下环境
	系统	alpine_3.16	redis	*		Up to (excluding) 7.0.8-r0
	运行在以下环境
	系统	alpine_3.17	redis	*		Up to (excluding) 7.0.8-r0
	运行在以下环境
	系统	alpine_3.18	redis	*		Up to (excluding) 7.0.8-r0
	运行在以下环境
	系统	alpine_3.19	redis	*		Up to (excluding) 7.0.8-r0
	运行在以下环境
	系统	amazon_2	redis	*		Up to (excluding) 6.2.11-1.amzn2
	运行在以下环境
	系统	debian_10	redis	*		Up to (excluding) 5.0.14-1+deb10u5
	运行在以下环境
	系统	debian_11	redis	*		Up to (excluding) 6.0.16-1+deb11u2
	运行在以下环境
	系统	debian_12	redis	*		Up to (excluding) 7.0.8-1
	运行在以下环境
	系统	fedora_36	redis	*		Up to (excluding) 6.2.9-1.fc36
	运行在以下环境
	系统	fedora_37	redis	*		Up to (excluding) 7.0.8-1.fc37
	运行在以下环境
	系统	opensuse_Leap_15.4	redis	*		Up to (excluding) 6.2.6-150400.3.11.1

攻击路径

本地
攻击复杂度

困难
权限要求

普通权限
影响范围

有限影响
EXP成熟度

未验证
补丁情况

官方补丁
数据保密性

无影响
数据完整性

无影响
服务器危害

无影响
全网数量

N/A

CWE-ID	漏洞类型
CWE-190	整数溢出或超界折返

中危 整数溢出或超界折返

漏洞描述

解决建议

参考链接

受影响软件情况

中危整数溢出或超界折返