A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG SET command can lead to an out of bounds write potentially resulting in code execution.

The version of Redis installed on the remote host is affected by a remote code execution vulnerability.

This update for redis to version 4.0.2 fixes the following issues :

  - CVE-2016-8339: CONFIG SET client-output-buffer-limit     Code Execution Vulnerability (boo#1002351)

The following upstream changes are included :

  - SLOWLOG now logs the offending client name and address

  - The modules native data types RDB format changed.

  - The AOF check utility is now able to deal with RDB     preambles.

  - GEORADIUS_RO and GEORADIUSBYMEMBER_RO variants, not     supporting the STORE option, were added in order to     allow read-only scaling of such queries.

  - HSET is now variadic, and HMSET is considered deprecated

  - GEORADIUS huge radius (>= ~6000 km) corner cases fixed

  - HyperLogLog commands no longer crash on certain input     (non HLL) strings.

  - Fixed SLAVEOF inside MULTI/EXEC blocks.

  - TCP binding bug fixed when only certain addresses were     available for a given por

  - MIGRATE could crash the server after a socket error

The remote host is affected by the vulnerability described in GLSA-201702-16 (Redis: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Redis. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, able to connect to a Redis instance, could issue       malicious commands possibly resulting in the execution of arbitrary code       with the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
109325	Pivotal Software Redis 3.2.x < 3.2.4 RCE	Nessus	Misc.	critical
104521	openSUSE Security Update : redis (openSUSE-2017-1258)	Nessus	SuSE Local Security Checks	critical
97259	GLSA-201702-16 : Redis: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical

Detections

Analytics

CVE-2016-8339

critical

Tenable Plugins

critical

critical

critical