CVE-2022-24736

Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0 and 6.2.7. An additional workaround to mitigate this problem without patching the redis-server executable, if Lua scripting is not being used, is to block access to SCRIPT LOAD and EVAL commands using ACL rules.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24736.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-476"
    ]
}

References

Affected packages

Git / github.com/redis/redis

Affected ranges

Type: GIT
Repo: https://github.com/redis/redis
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

d375595d5e3ae2e5c29e6c00a2dc3d60578fd9fc

Affected versions

1.*

1.3.6

2.*

2.0.0

2.0.1

2.0.2

2.0.3

2.0.4

2.0.5

2.2-alpha0

2.2-alpha1

2.2-alpha2

2.2-alpha3

2.2-alpha4

2.2-alpha5

2.2-alpha6

2.2.0

2.2.0-rc1

2.2.0-rc2

2.2.0-rc3

2.2.0-rc4

2.2.1

2.2.10

2.2.105-scripting

2.2.106-scripting

2.2.107-scripting

2.2.11

2.2.110-scripting

2.2.111-scripting

2.2.12

2.2.13

2.2.14

2.2.15

2.2.2

2.2.3

2.2.4

2.2.5

2.2.6

2.2.7

2.2.8

2.2.9

2.3-alpha0

2.4.0

2.4.0-rc1

2.4.0-rc2

2.4.0-rc3

2.4.0-rc4

2.4.0-rc5

2.4.0-rc6

2.4.0-rc7

2.4.0-rc8

2.4.1

2.4.10

2.4.11

2.4.12

2.4.13

2.4.14

2.4.15

2.4.16

2.4.17

2.4.18

2.4.2

2.4.3

2.4.4

2.4.5

2.4.6

2.4.7

2.4.8

2.4.9

2.6.0

2.6.0-rc1

2.6.0-rc2

2.6.0-rc3

2.6.0-rc4

2.6.0-rc5

2.6.0-rc6

2.6.0-rc7

2.6.0-rc8

2.6.1

2.6.10

2.6.10-1

2.6.10-2

2.6.10-3

2.6.11

2.6.12

2.6.13

2.6.14

2.6.14-1

2.6.14-2

2.6.15

2.6.16

2.6.17

2.6.2

2.6.3

2.6.4

2.6.5

2.6.6

2.6.7

2.6.7-1

2.6.8

2.6.8-1

2.6.9

2.6.9-1

2.8.0

2.8.0-rc1

2.8.0-rc2

2.8.0-rc3

2.8.0-rc4

2.8.0-rc5

2.8.0-rc6

2.8.1

2.8.10

2.8.11

2.8.12

2.8.13

2.8.14

2.8.15

2.8.16

2.8.17

2.8.18

2.8.19

2.8.2

2.8.20

2.8.21

2.8.22

2.8.23

2.8.24

2.8.3

2.8.4

2.8.5

2.8.6

2.8.7

2.8.8

2.8.9

3.*

3.0-alpha0

3.0.0

3.0.0-beta1

3.0.0-beta2

3.0.0-beta3

3.0.0-beta4

3.0.0-beta5

3.0.0-beta6

3.0.0-beta7

3.0.0-beta8

3.0.0-rc1

3.0.0-rc2

3.0.0-rc3

3.0.0-rc4

3.0.0-rc5

3.0.0-rc6

3.0.1

3.0.2

3.0.3

3.0.4

3.0.5

3.0.6

3.0.7

3.2-rc1

3.2.0

3.2.0-rc2

3.2.0-rc3

3.2.1

3.2.10

3.2.11

3.2.12

3.2.13

3.2.2

3.2.3

3.2.4

3.2.5

3.2.6

3.2.7

3.2.8

3.2.9

4.*

4.0-rc1

4.0-rc2

4.0-rc3

4.0.0

4.0.1

4.0.10

4.0.11

4.0.12

4.0.13

4.0.14

4.0.2

4.0.3

4.0.4

4.0.5

4.0.6

4.0.7

4.0.8

4.0.9

5.*

5.0-rc1

5.0-rc2

5.0-rc3

5.0-rc4

5.0-rc5

5.0-rc6

5.0.0

5.0.1

5.0.10

5.0.11

5.0.12

5.0.13

5.0.14

5.0.2

5.0.3

5.0.4

5.0.5

5.0.6

5.0.7

5.0.8

5.0.9

6.*

6.0-rc1

6.0-rc2

6.0-rc3

6.0-rc4

6.0.0

6.0.1

6.0.10

6.0.11

6.0.12

6.0.13

6.0.14

6.0.15

6.0.16

6.0.17

6.0.18

6.0.19

6.0.2

6.0.20

6.0.3

6.0.4

6.0.5

6.0.6

6.0.7

6.0.8

6.0.9

6.2-rc1

6.2-rc2

6.2-rc3

6.2.0

6.2.1

6.2.10

6.2.11

6.2.12

6.2.13

6.2.14

6.2.15

6.2.16

6.2.17

6.2.18

6.2.19

6.2.2

6.2.20

6.2.21

6.2.3

6.2.4

6.2.5

6.2.6

6.2.7

6.2.8

6.2.9

7.*

7.0-rc1

7.0-rc2

7.0-rc3

7.2-rc1

7.2-rc2

7.2-rc3

7.2.0

7.2.1

7.2.10

7.2.11

7.2.12

7.2.13

7.2.2

7.2.3

7.2.4

7.2.5

7.2.6

7.2.7

7.2.8

7.2.9

7.4-rc1

7.4-rc2

7.4.0

7.4.1

7.4.2

7.4.3

7.4.4

7.4.5

7.4.6

7.4.7

7.4.8

8.*

8.0-m01

8.0-m02

8.0-m03

8.0-m04

8.0-m04-int

8.0-rc1

8.0-rc1-int

8.0-rc1-int2

8.0-rc2-int

8.0.0

8.0.1

8.0.1-int

8.0.2

8.0.3

8.0.4

8.0.5

8.0.6

8.2-int

8.2-m01

8.2-m01-int

8.2-m01-int2

8.2-rc1

8.2-rc1-int

8.2.0

8.2.1

8.2.1-int

8.2.2

8.2.2-int

8.2.3

8.2.4

8.2.5

8.4-int

8.4-int2

8.4-int3

8.4-m01-int

8.4-rc1

8.4-rc1-int

8.4-rc1-int2

8.4.0

8.4.1

8.4.2

8.6-rc1

8.6.0

8.6.1

8.6.2

Other

twitter-20100804

twitter-20100825

vm-playpen

with-deprecated-diskstore

v1.*

v1.3.10

v1.3.11

v1.3.12

v1.3.7

v1.3.8

v1.3.9

v2.*

v2.0.0-rc1

v2.0.0-rc1b

v2.0.0-rc2

v2.0.0-rc3

v2.0.0-rc4

v2.0.0-stable

v2.0.1-stable

v2.0.2-stable

v2.0.3-stable

v2.0.4-stable

v2.1.1-watch

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24736.json"