Back to bug 2013499

Who When What Removed Added
Marian Rehak 2021-10-13 04:45:57 UTC Blocks 2013502
Vipul Nair 2021-10-19 14:21:06 UTC Doc Text An integer overflow when parsing array replies in hiredis, leads to a buffer overflow and subsequently code execution. A remote attacker could use this flaw to execute arbitrary commands. An attacker could craft a malicious payload to execute commands on the system, in which hiredis is listening. This could lead to command execution.
Vipul Nair 2021-10-19 14:36:26 UTC Doc Text An integer overflow when parsing array replies in hiredis, leads to a buffer overflow and subsequently code execution. A remote attacker could use this flaw to execute arbitrary commands. An attacker could craft a malicious payload to execute commands on the system, in which hiredis is listening. This could lead to command execution. An integer overflow when parsing array replies in hiredis, leads to a buffer overflow and subsequently code execution. A remote attacker could use this flaw to execute arbitrary commands. An attacker could craft a malicious payload to execute commands on the system, in which hiredis is listening. This could lead to system compromise
RaTasha Tillery-Smith 2021-10-19 17:41:37 UTC Doc Text An integer overflow when parsing array replies in hiredis, leads to a buffer overflow and subsequently code execution. A remote attacker could use this flaw to execute arbitrary commands. An attacker could craft a malicious payload to execute commands on the system, in which hiredis is listening. This could lead to system compromise An integer overflow flaw when parsing array replies was found in hiredis, which leads to a buffer overflow and subsequent code execution. This flaw allows a remote attacker to execute arbitrary commands and craft a malicious payload to execute commands on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Red Hat Bugzilla 2021-11-02 15:42:16 UTC CC notting
Red Hat Bugzilla 2021-12-15 11:50:52 UTC CC cmeyers
Red Hat Bugzilla 2021-12-20 17:33:28 UTC CC sdoran
Tomas Hoger 2022-01-26 10:26:12 UTC Depends On 2013500
Red Hat Bugzilla 2022-04-23 04:25:53 UTC CC chousekn
Igor Raits 2022-08-30 12:14:15 UTC CC igor.raits
Red Hat Bugzilla 2023-07-07 08:34:13 UTC Assignee security-response-team nobody

Back to bug 2013499