CVE-2022-24834
Public on 2023-07-13
Modified on 2024-01-30
Description
A heap-based buffer overflow flaw was found in Redis. This flaw allows an attacker to trick an authenticated user into executing a specially crafted Lua script in Redis. This attack triggers a heap overflow in the cjson and cmsgpack libraries, resulting in heap corruption and potential remote code execution.
CVSS v3 Base Score
See breakdown
