CVE-2022-24834: fedoraproject fedora Heap-based Buffer Overflow
Vulnerability summary
CVE-2022-24834 is a high (CVSS 8.8) Heap-based Buffer Overflow vulnerability in fedoraproject fedora. EPSS estimates a 41.14% chance of exploitation in the next 30 days, higher than 98.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 8 · Related 6Timeline
- 13-07-2023PublishedVulnerability first disclosed.
- 13-02-2025Last modifiedVulnerability information updated.
Description
Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.
CVSS metrics
5 scores · 5 sources · 1 version- CVE.orgCNA7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- OSV · AlpineEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
41.14%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
-0.27 pp
From 41.41% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-122Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-680Integer Overflow to Buffer OverflowThe product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.
Affected systems
Ubuntu3 products
- lua-cjsonAll versions (No fix recorded) | < 2.1.0+dfsg-2.1ubuntu0.20.04.1~esm2 | < 2.1.0+dfsg-2.1ubuntu0.22.04.1~esm2
- lua-cmsgpackAll versions (No fix recorded)
- redis< 2:2.8.4-2ubuntu0.2+esm3 | < 2:3.0.6-1ubuntu0.4+esm2 | < 5:4.0.9-1ubuntu0.2+esm4 | < 5:5.0.7-2ubuntu0.1+esm2 | < 5:6.0.16-1ubuntu1+esm1
Opensuse2 products
- redis&distro=openSUSE Leap 15.4< 6.2.6-150400.3.22.1
- redis&distro=openSUSE Leap 15.5< 6.2.6-150400.3.22.1
Suse2 products
- redis&distro=SUSE Linux Enterprise Module for Server Applications 15 SP4< 6.2.6-150400.3.22.1
- redis&distro=SUSE Linux Enterprise Module for Server Applications 15 SP5< 6.2.6-150400.3.22.1
Alpine1 product
- redis≥ 2.6.0, < 7.0.12-r0
Debian1 product
- redis< 5:7.0.15-1~deb12u1 | < 5:7.0.12-1
Fedoraproject1 product
- fedoraEOL37 | 38
Mageia1 product
- redis< 6.0.20-1.mga8
Redis1 product
- redis≥ 6.0.0, < 6.0.20 | ≥ 2.6.0, < 6.0.20 | ≥ 6.2.0, < 6.2.13 | ≥ 7.0.0, < 7.0.12
8 vendors · 12 products
References
22 links- github.com/redis/redis/security/advisories/GHSA-p8x2-9v9q-c838X Refsource CONFIRMAdvisoryVendor Advisory
