CVE-2022-31144 : Redis is an in-memory database that persists on disk. A specially crafted `XAUTO

Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version 7.0.4.

Published 2022-07-19 21:15:15

Updated 2022-10-07 15:49:24

Source GitHub, Inc.

View at NVD, CVE.org

Vulnerability category: OverflowMemory CorruptionExecute code

Products affected by CVE-2022-31144

Redis » Redis
Versions from including (>=) 7.0 and before (<) 7.0.4
cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2022-31144

Top countries where our scanners detected CVE-2022-31144

Top open port discovered on systems with this issue 6379

IPs affected by CVE-2022-31144 7,283

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2022-31144!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2022-31144

EPSS FAQ

2.76%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 90 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-31144

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.0	HIGH	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	1.0	5.9	GitHub, Inc.
Attack Vector: Local Attack Complexity: High Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2022-31144

CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Assigned by: security-advisories@github.com (Primary)
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Secondary)

References for CVE-2022-31144

https://security.netapp.com/advisory/ntap-20220909-0002/

CVE-2022-31144 Redis Vulnerability in NetApp Products | NetApp Product Security
Third Party Advisory
https://security.gentoo.org/glsa/202209-17

Redis: Multiple Vulnerabilities (GLSA 202209-17) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://github.com/redis/redis/releases/tag/7.0.4

Release 7.0.4 · redis/redis · GitHub
Release Notes;Third Party Advisory
https://github.com/redis/redis/security/advisories/GHSA-96f7-42fg-2jrh

Potential heap overflow in Redis 7.0 XAUTOCLAIM command. · Advisory · redis/redis · GitHub
Third Party Advisory