Vulnerability Details CVE-2022-33105
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://github.com/redis/redis/commit/4a7a4e42db8ff757cdf3f4a824f66426036034ef
- https://github.com/redis/redis/pull/10753
- https://github.com/redis/redis/pull/10829
- https://raw.githubusercontent.com/redis/redis/7.0.1/00-RELEASENOTES
- https://security.gentoo.org/glsa/202209-17
- https://security.netapp.com/advisory/ntap-20220729-0005/
- https://github.com/redis/redis/commit/4a7a4e42db8ff757cdf3f4a824f66426036034ef
- https://github.com/redis/redis/pull/10753
- https://github.com/redis/redis/pull/10829
- https://raw.githubusercontent.com/redis/redis/7.0.1/00-RELEASENOTES
- https://security.gentoo.org/glsa/202209-17
- https://security.netapp.com/advisory/ntap-20220729-0005/