CVE-2021-32761

CVE	CVE-2021-32761
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-07-21 21:15:00 UTC
Updated	2023-11-07 03:35:00 UTC
Description	Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with version 2.2 and prior to versions 5.0.13, 6.0.15, and 6.2.5. On 32-bit systems, Redis `BIT` command are vulnerable to integer overflow that can potentially be exploited to corrupt the heap, leak arbitrary heap contents or trigger remote code execution. The vulnerability involves changing the default `proto-max-bulk-len` configuration parameter to a very large value and constructing specially crafted commands bit commands. This problem only affects Redis on 32-bit platforms, or compiled as a 32-bit binary. Redis versions 5.0.`3m 6.0.15, and 6.2.5 contain patches for this issue. An additional workaround to mitigate the problem without patching the `redis-server` executable is to prevent users from modifying the `proto-max-bulk-len` configuration parameter. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.

Problem Types: CWE-125 | CWE-680

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Debian	Debian Linux	10.0	All	All	All
Operating System	Debian	Debian Linux	11.0	All	All	All
Operating System	Debian	Debian Linux	9.0	All	All	All
Operating System	Fedoraproject	Fedora	33	All	All	All
Operating System	Fedoraproject	Fedora	34	All	All	All
Application	Redislabs	Redis	All	All	All	All

Reference	Source	Link	Tags
[SECURITY] Fedora 34 Update: redis-6.2.5-1.fc34 - package-announce - Fedora Mailing-Lists		lists.fedoraproject.org
Integer overflow issues with BITFIELD command on 32-bit systems · Advisory · redis/redis · GitHub	CONFIRM	github.com
Redis: Multiple Vulnerabilities (GLSA 202209-17) — Gentoo security	GENTOO	security.gentoo.org
Debian -- Security Information -- DSA-5001-1 redis	DEBIAN	www.debian.org
CVE-2021-32761 Redis Vulnerability in NetApp Products \| NetApp Product Security	CONFIRM	security.netapp.com
[SECURITY] [DLA 2717-2] redis security update	MLIST	lists.debian.org
[SECURITY] Fedora 33 Update: redis-6.0.15-1.fc33 - package-announce - Fedora Mailing-Lists	FEDORA	lists.fedoraproject.org
[SECURITY] [DLA 2717-1] redis security update	MLIST	lists.debian.org
[SECURITY] Fedora 34 Update: redis-6.2.5-1.fc34 - package-announce - Fedora Mailing-Lists	FEDORA	lists.fedoraproject.org
[SECURITY] Fedora 33 Update: redis-6.0.15-1.fc33 - package-announce - Fedora Mailing-Lists		lists.fedoraproject.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

178718 Debian Security Update for redis (DLA 2717-1)
178778 Debian Security Update for redis (DLA 2717-2)
178879 Debian Security Update for redis (DSA 5001-1)
180205 Debian Security Update for redis (CVE-2021-32761)
281793 Fedora Security Update for redis (FEDORA-2021-76cf1653b3)
281794 Fedora Security Update for redis (FEDORA-2021-10d54c261f)
356169 Amazon Linux Security Advisory for redis : ALASREDIS6-2023-005
356511 Amazon Linux Security Advisory for redis : ALAS2REDIS6-2023-005
500600 Alpine Linux Security Update for redis
501776 Alpine Linux Security Update for redis
502979 Alpine Linux Security Update for redis
504355 Alpine Linux Security Update for redis
690076 Free Berkeley Software Distribution (FreeBSD) Security Update for redis (c561ce49-eabc-11eb-9c3f-0800270512f4)
710625 Gentoo Linux Redis Multiple Vulnerabilities (GLSA 202209-17)
900142 CBL-Mariner Linux Security Update for redis 5.0.5
901723 Common Base Linux Mariner (CBL-Mariner) Security Update for redis (6850-1)
903002 Common Base Linux Mariner (CBL-Mariner) Security Update for redis (4746)