7.5

CVE-2022-33105

Exploit
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redis ≫ Redis Version7.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.07% 0.861
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://security.gentoo.org/glsa/202209-17
Third Party Advisory
https://github.com/redis/redis/commit/4a7a4e42db8ff757cdf3f4a824f66426036034ef
Patch
Third Party Advisory
https://github.com/redis/redis/pull/10753
Patch
Third Party Advisory
Exploit
Issue Tracking
https://github.com/redis/redis/pull/10829
Third Party Advisory
Exploit
Release Notes
Issue Tracking
https://raw.githubusercontent.com/redis/redis/7.0.1/00-RELEASENOTES
Third Party Advisory
Release Notes
https://security.netapp.com/advisory/ntap-20220729-0005/
Third Party Advisory