Bug 2011000 (CVE-2021-32675) - CVE-2021-32675 redis: Denial of service via Redis Standard Protocol (RESP) request
Summary: CVE-2021-32675 redis: Denial of service via Redis Standard Protocol (RESP) re...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2021-32675
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2011198 2011638 2011663 2012185 2012186 2012187 2012188 2012189 2012190 2012191 2012192 2012193 2012194 2012195 2012196 2012204 2012205 2012382 2014264 2015069 2015236 2015651 2015866 2015867
Blocks: 2011061
TreeView+ depends on / blocked
 
Reported: 2021-10-05 18:20 UTC by Pedro Sampaio
Modified: 2022-08-09 09:36 UTC (History)
53 users (show)

Fixed In Version: redis 6.2.6, redis 6.0.16, redis 5.0.14
Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in redis. When parsing an incoming Redis Standard Protocol (RESP) request, redis allocates memory according to user-specified values, which determine the number of elements (in the multi-bulk header) and size of each element (in the bulk header). This flaw allows an unauthenticated, remote user delivering specially crafted requests over multiple connections to cause the server to allocate a significant amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Clone Of:
Environment:
Last Closed: 2021-10-15 02:08:29 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2021:3953 0 None None None 2021-10-25 01:19:08 UTC
Red Hat Product Errata RHBA-2021:3997 0 None None None 2021-10-26 13:01:04 UTC
Red Hat Product Errata RHBA-2021:4001 0 None None None 2021-10-26 16:46:20 UTC
Red Hat Product Errata RHSA-2021:3873 0 None None None 2021-10-14 22:39:08 UTC
Red Hat Product Errata RHSA-2021:3918 0 None None None 2021-10-19 13:39:55 UTC
Red Hat Product Errata RHSA-2021:3925 0 None None None 2021-10-20 03:55:26 UTC
Red Hat Product Errata RHSA-2021:3944 0 None None None 2021-10-20 13:53:46 UTC
Red Hat Product Errata RHSA-2021:3945 0 None None None 2021-10-20 14:15:31 UTC
Red Hat Product Errata RHSA-2021:3946 0 None None None 2021-10-20 13:56:30 UTC
Red Hat Product Errata RHSA-2021:3947 0 None None None 2021-10-20 13:51:38 UTC
Red Hat Product Errata RHSA-2021:3949 0 None None None 2021-10-20 19:44:52 UTC
Red Hat Product Errata RHSA-2021:3971 0 None None None 2021-10-25 13:17:29 UTC
Red Hat Product Errata RHSA-2021:3980 0 None None None 2021-10-25 17:56:25 UTC
Red Hat Product Errata RHSA-2021:4618 0 None None None 2021-11-11 18:32:39 UTC

Description Pedro Sampaio 2021-10-05 18:20:49 UTC 
Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RESP) request, Redis allocates memory according to user-specified values which determine the number of elements (in the multi-bulk header) and size of each element (in the bulk header). An attacker delivering specially crafted requests over multiple connections can cause the server to allocate significant amount of memory. Because the same parsing mechanism is used to handle authentication requests, this vulnerability can also be exploited by unauthenticated users. The problem is fixed in Redis versions 6.2.6, 6.0.16 and 5.0.14. An additional workaround to mitigate this problem without patching the redis-server executable is to block access to prevent unauthenticated users from connecting to Redis. This can be done in different ways: Using network access control tools like firewalls, iptables, security groups, etc. or Enabling TLS and requiring users to authenticate using client side certificates.

References:

https://github.com/redis/redis/commit/5674b0057ff2903d43eaff802017eddf37c360f8
https://github.com/redis/redis/security/advisories/GHSA-f6pw-v9gw-v64p
Comment 5 errata-xmlrpc 2021-10-14 22:39:05 UTC 
This issue has been addressed in the following products:

  Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 7

Via RHSA-2021:3873 https://access.redhat.com/errata/RHSA-2021:3873
Comment 6 Product Security DevOps Team 2021-10-15 02:08:29 UTC 
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2021-32675
Comment 8 errata-xmlrpc 2021-10-19 13:39:52 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2021:3918 https://access.redhat.com/errata/RHSA-2021:3918
Comment 9 errata-xmlrpc 2021-10-20 03:55:23 UTC 
This issue has been addressed in the following products:

  Red Hat Advanced Cluster Management for Kubernetes 2.3 for RHEL 8
  Red Hat Advanced Cluster Management for Kubernetes 2.3 for RHEL 7

Via RHSA-2021:3925 https://access.redhat.com/errata/RHSA-2021:3925
Comment 11 errata-xmlrpc 2021-10-20 13:51:35 UTC 
This issue has been addressed in the following products:

  Red Hat Software Collections for Red Hat Enterprise Linux 7
  Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS

Via RHSA-2021:3947 https://access.redhat.com/errata/RHSA-2021:3947
Comment 12 errata-xmlrpc 2021-10-20 13:53:43 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Extended Update Support

Via RHSA-2021:3944 https://access.redhat.com/errata/RHSA-2021:3944
Comment 13 errata-xmlrpc 2021-10-20 13:56:28 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.1 Extended Update Support

Via RHSA-2021:3946 https://access.redhat.com/errata/RHSA-2021:3946
Comment 14 errata-xmlrpc 2021-10-20 14:15:21 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2021:3945 https://access.redhat.com/errata/RHSA-2021:3945
Comment 15 errata-xmlrpc 2021-10-20 19:44:49 UTC 
This issue has been addressed in the following products:

  Red Hat Advanced Cluster Management for Kubernetes 2.1 for RHEL 8
  Red Hat Advanced Cluster Management for Kubernetes 2.1 for RHEL 7

Via RHSA-2021:3949 https://access.redhat.com/errata/RHSA-2021:3949
Comment 16 errata-xmlrpc 2021-10-25 13:17:27 UTC 
This issue has been addressed in the following products:

  Red Hat OpenStack Platform 10.0 (Newton)

Via RHSA-2021:3971 https://access.redhat.com/errata/RHSA-2021:3971
Comment 17 errata-xmlrpc 2021-10-25 17:56:22 UTC 
This issue has been addressed in the following products:

  Red Hat OpenStack Platform 13.0 - ELS
  Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUS

Via RHSA-2021:3980 https://access.redhat.com/errata/RHSA-2021:3980
Comment 19 errata-xmlrpc 2021-11-11 18:32:37 UTC 
This issue has been addressed in the following products:

  Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8

Via RHSA-2021:4618 https://access.redhat.com/errata/RHSA-2021:4618
Note You need to log in before you can comment on or make changes to this bug.