A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use jemalloc or glibc malloc.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when     using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or     process crash. Effectively this flaw does not affect the vast majority of users, who use jemalloc or glibc     malloc. (CVE-2021-3470)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the redis package has been released.

ID	Name	Product	Family	Severity
246392	Linux Distros Unpatched Vulnerability : CVE-2021-3470	Nessus	Misc.	medium
204322	Photon OS 4.0: Redis PHSA-2021-4.0-0008	Nessus	PhotonOS Local Security Checks	medium
148824	Photon OS 2.0: Redis PHSA-2021-2.0-0336	Nessus	PhotonOS Local Security Checks	medium
148813	Photon OS 3.0: Redis PHSA-2021-3.0-0220	Nessus	PhotonOS Local Security Checks	medium
148809	Photon OS 1.0: Redis PHSA-2021-1.0-0380	Nessus	PhotonOS Local Security Checks	medium

Detections

Analytics

CVE-2021-3470

medium

Tenable Plugins

medium

medium

medium

medium

medium