Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version 7.0.4.
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
The product writes data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://github.com/redis/redis/security/advisories/GHSA-96f7-42fg-2jrh | third party advisory |
| https://github.com/redis/redis/releases/tag/7.0.4 | third party advisory release notes |
| https://security.netapp.com/advisory/ntap-20220909-0002/ | third party advisory |
| https://security.gentoo.org/glsa/202209-17 | third party advisory vendor advisory |