CVE-2022-31144 PoC — Redis Labs Redis 缓冲区错误漏洞

Source

https://github.com/SpiralBL0CK/CVE-2022-31144

Associated Vulnerability

Title:Redis Labs Redis 缓冲区错误漏洞 (CVE-2022-31144)
Description:Redis Labs Redis是美国Redis Labs公司的一套开源的使用ANSI C编写、支持网络、可基于内存亦可持久化的日志型、键值（Key-Value）存储数据库，并提供多种语言的API。 Redis 7.0.4 之前版本存在安全漏洞，该漏洞源于针对特定状态的流键的特制 XAUTOCLAIM 命令可能导致堆溢出，并可能导致远程代码执行。

Description

CVE-2022-31144 dos pt redis, not finished yet or too soon, this can be turned into rce but oh well if you smart enough

Readme

# CVE-2022-31144
CVE-2022-31144 dos 4redis.
Rce not finished yet or too soon, this can be turned into rce but oh well if you smart enough

File Snapshot


 [4.0K]  /data/pocs/7baf2f2b0c6fd2a86576a2f2c6722368390292f4
├── [1.6K]  ab.py
└── [ 138]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!