CVE-2022-3647

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-3647
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3647.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-3647
Aliases
Downstream
ALPINE (1)
AZL (1)
BELL (1)
CGA (4)
CLEANSTART (30)
DEBIAN (1)
ECHO (1)
OESA (1)
openSUSE (1)
SUSE (2)
Related
openSUSE (1)
SUSE (2)
Published
2022-10-21T00:00:00Z
Modified
2026-10-21T08:23:45Z
Severity
  • 3.1 (Low) CVSS_V3 - CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
Redis Crash Report debug.c sigsegvHandler denial of service
Details

** DISPUTED ** A vulnerability, which was classified as problematic, was found in Redis up to 6.2.7/7.0.5. Affected is the function sigsegvHandler of the file debug.c of the component Crash Report. The manipulation leads to denial of service. The complexity of an attack is rather high. The exploitability is told to be difficult. The real existence of this vulnerability is still doubted at the moment. Upgrading to version 6.2.8 and 7.0.6 is able to address this issue. The patch is identified as 0bf90d944313919eb8e63d3588bf63a367f020a3. It is recommended to apply a patch to fix this issue. VDB-211962 is the identifier assigned to this vulnerability. NOTE: The vendor claims that this is not a DoS because it applies to the crash logging mechanism which is triggered after a crash has occurred.

Database specific 
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-404"
    ],
    "isDisputed":  true,
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3647.json"
}
References

Affected packages

Git / github.com/redis/redis

Affected ranges

Type
GIT
Repo
https://github.com/redis/redis
Events
Introduced
445aa844b946a8f1bc21ac8554b44adb1ecb4018
Fixed
0bf90d944313919eb8e63d3588bf63a367f020a3
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "6.2.0"
                },
                {
                    "last_affected":  "6.2.0"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "6.2.1"
                },
                {
                    "last_affected":  "6.2.1"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "6.2.2"
                },
                {
                    "last_affected":  "6.2.2"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "6.2.3"
                },
                {
                    "last_affected":  "6.2.3"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "6.2.4"
                },
                {
                    "last_affected":  "6.2.4"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "6.2.5"
                },
                {
                    "last_affected":  "6.2.5"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "6.2.6"
                },
                {
                    "last_affected":  "6.2.6"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "6.2.7"
                },
                {
                    "last_affected":  "6.2.7"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "7.0.0"
                },
                {
                    "last_affected":  "7.0.0"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "7.0.1"
                },
                {
                    "last_affected":  "7.0.1"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "7.0.2"
                },
                {
                    "last_affected":  "7.0.2"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "7.0.3"
                },
                {
                    "last_affected":  "7.0.3"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "7.0.4"
                },
                {
                    "last_affected":  "7.0.4"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "7.0.5"
                },
                {
                    "last_affected":  "7.0.5"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "fixed":  "0bf90d944313919eb8e63d3588bf63a367f020a3"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

6.*
6.2.0
6.2.1
6.2.2
6.2.3
6.2.4
6.2.5
6.2.6
6.2.7
7.*
7.0.0
7.0.1
7.0.2
7.0.3
7.0.4
7.0.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3647.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "210015020685415630896762025585596103580",
            "length":  441
        },
        "id":  "CVE-2022-3647-112c64e7",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/redis/redis/commit/0bf90d944313919eb8e63d3588bf63a367f020a3",
        "target":  {
            "file":  "src/debug.c",
            "function":  "watchdogSignalHandler"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "125199183663522286183110685364425084528",
                "240134876764743336796492355373468475598",
                "151442725386573032328058880146315980765",
                "70887686621568448199757418625969223851",
                "159433737591705640380983121509517214805",
                "99214821734321066044634766690401539672",
                "336939824272693440603287248681414110273",
                "264106142673394772445649974467390821574",
                "194499629950286463780870291872087987829",
                "98917798553546872256311334130464809873",
                "89496349629360282942510588597095275666",
                "156847220522005228218005165932475101381",
                "78745651507431652794460859017693843398",
                "282317185318237556990371900905024362252",
                "270041966988879547815228352414232652050",
                "215613342631922840722695521336356185428",
                "117004681868532725816036758954638963637",
                "98917798553546872256311334130464809873",
                "137556173526779279716049051590108009314",
                "322498891338560971765975543526407180046",
                "222327717770943925128663671897540260125",
                "178166755421363730958786412849412263145",
                "245974618798261078501579865073330658432",
                "244633315158013149406870214684196843619",
                "271064083238182358399508573951963267793",
                "91962416890634328936155448391962135967",
                "249814579166790539327879824093880487641",
                "131898852810309585878212082280353996182",
                "199132917756532262015975422040958526016",
                "291477190740769817464322933308554795717",
                "269454987183942483124961857704032223789",
                "264163473427487903904499996668655604335",
                "189238426234730694714928590307270501491",
                "161117054153999153923144698988708605253",
                "283660349050095070730508365867882323429",
                "230362210861926887461889883350866717836",
                "272513892293487143577530054766116610485",
                "204892074706307582700487292280379152467",
                "237168579805711901365502681571442970256",
                "337035157366946892123445259154845874547",
                "149076952619576010735712835145637759210",
                "58959829995265368591538823382650742059",
                "284134007010098371780213721819680864066",
                "226497388278297968597848181111841278266",
                "50028399420648578750191485029321021137",
                "129447741877903948024507576056660296761",
                "128578087581252819207174310719333469090",
                "175288694030684297583706920937956402098",
                "35782146601185620832389730793732121579",
                "296650932713505818610148963499279015196",
                "1904102272459599052028495350710939099",
                "184346695100977541784706616805383027746",
                "11738445745272513613492292979713505057",
                "12123272397736002172475455658448341070",
                "319030372747795029739559839832258586787",
                "270999107406263574338145198520523646125",
                "197068873363893018112832894959858748358",
                "96754676778290157392993206661984155926",
                "284066322399563837595463265755703785967",
                "205075484669615089918902755264303026418",
                "49964958118044949987300187485513887405",
                "55091662515547688433730592934432040260",
                "58959829995265368591538823382650742059",
                "331734508969332822325244078587068500052",
                "30044100684124268452303085568514779040",
                "265237687061628947004419030057487680420",
                "236989670316446279729545520100814464854",
                "84393526027923097745066654269158637700",
                "2755196833804476455885345879262767712",
                "109200473934418800592328873377370969858",
                "68205031767228308638483655051997712310",
                "110799629961889679169740661999710082171",
                "163838184404947015783278144430164318052",
                "168727024169599365813301374983802252058",
                "263740482781233496337243070378245109443",
                "187972261297474336928322495930257767923",
                "337968945059866065911518687776696941576",
                "81129594417850072974989305941010668400",
                "179472014131892784758995701872343522190"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2022-3647-76d6a025",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/redis/redis/commit/0bf90d944313919eb8e63d3588bf63a367f020a3",
        "target":  {
            "file":  "src/debug.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "67955424514005580958484976880433966415",
            "length":  80
        },
        "id":  "CVE-2022-3647-8a652a48",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/redis/redis/commit/0bf90d944313919eb8e63d3588bf63a367f020a3",
        "target":  {
            "file":  "src/debug.c",
            "function":  "getMcontextEip"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "268361595815424809980535498494661636657",
            "length":  899
        },
        "id":  "CVE-2022-3647-f3634cd9",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/redis/redis/commit/0bf90d944313919eb8e63d3588bf63a367f020a3",
        "target":  {
            "file":  "src/debug.c",
            "function":  "sigsegvHandler"
        }
    }
]
vanir_signatures_modified 
"2026-10-21T08:23:45Z"