Integer overflow in Redis - CVE-2022-35951

Vulnerability details

The vulnerability allows a local user to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow when executing a XAUTOCLAIM command on a stream key in a specific state. A local user can use a specially-crafted COUNT argument, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

How to mitigate CVE-2022-35951

External References

• https://github.com/redis/redis/security/advisories/GHSA-5gc4-76rx-22c9
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A7INCOOFPPEAKNDBZU3TIZJPYXBULI2C/

Related Security Bulletins

• Integer overflow in Redis
• Gentoo update for Redis
• Multiple vulnerabilities in argo-cd
• Fedora 37 update for redis