Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2021-32765— Integer Overflow to Buffer Overflow in Hiredis

Quick assessment

Affected
redis hiredis
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Hiredis是一款用于Redis数据库的C语言客户端。 Hiredis 存在安全漏洞，该漏洞允许攻击者提供恶意制作或损坏的RESP、mult-bulk 协议数据，可导致整数溢出。

CVSS 8.8 · High EPSS 2.14% · P81

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2021-32765

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Integer Overflow to Buffer Overflow in Hiredis
Source: CVE Program / CVE List V5
Vulnerability Description
Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count * sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn't itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-array-elements) context option to a value small enough that no overflow is possible.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
整数溢出或超界折返
Source: CVE Program / CVE List V5
Vulnerability Title
Hiredis 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Hiredis是一款用于Redis数据库的C语言客户端。 Hiredis 存在安全漏洞，该漏洞允许攻击者提供恶意制作或损坏的RESP、mult-bulk 协议数据，可导致整数溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
redis hiredis < 1.0.1 -

II. Public POCs for CVE-2021-32765

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-32765

请登录查看更多情报信息。

Patches & Fixes for CVE-2021-32765 (1)

Vendor Advisories for CVE-2021-32765 (3)

Mailing List Discussions for CVE-2021-32765 (1)

Other References for CVE-2021-32765 (1)

Same Patch Batch · redis · 2021-10-04 · 9 CVEs total

CVE-2021-32626 7.5 HIGH Lua scripts can overflow the heap-based Lua stack in Redis
CVE-2021-32627 7.5 HIGH Integer overflow issue with Streams in Redis
CVE-2021-32628 7.5 HIGH Vulnerability in handling large ziplists
CVE-2021-32675 7.5 HIGH DoS vulnerability in Redis
CVE-2021-32687 7.5 HIGH Integer overflow issue with intsets in Redis
CVE-2021-32762 7.5 HIGH Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platf
CVE-2021-41099 7.5 HIGH Integer overflow issue with strings in Redis
CVE-2021-32672 5.3 MEDIUM Vulnerability in Lua Debugger in Redis

IV. Related Vulnerabilities

Same vendor: redis
Same weakness: CWE-190

V. Comments for CVE-2021-32765

No comments yet

Leave a comment