Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count * sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn't itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-array-elements) context option to a value small enough that no overflow is possible.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2220827b-c732-11ec-b272-901b0e934d69 advisory.

  - Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is     vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol     data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count *     sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn't     itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of     hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-     array-elements) context option to a value small enough that no overflow is possible. (CVE-2021-32765)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of hiredis installed on the remote host is prior to 0.13.3-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2REDIS6-2023-004 advisory.

  - Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is     vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol     data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count *     sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn't     itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of     hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-     array-elements) context option to a value small enough that no overflow is possible. (CVE-2021-32765)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202210-32 (hiredis, hiredis-py: Multiple Vulnerabilities)

  - Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is     vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol     data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count *     sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn't     itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of     hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-     array-elements) context option to a value small enough that no overflow is possible. (CVE-2021-32765)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1536-1 advisory.

  - Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is     vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol     data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count *     sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn't     itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of     hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-     array-elements) context option to a value small enough that no overflow is possible. (CVE-2021-32765)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2783 advisory.

  - Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is     vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol     data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count *     sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn't     itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of     hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-     array-elements) context option to a value small enough that no overflow is possible. (CVE-2021-32765)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
184469	FreeBSD : hiredis -- integer/buffer overflow (2220827b-c732-11ec-b272-901b0e934d69)	Nessus	FreeBSD Local Security Checks	high
182046	Amazon Linux 2 : hiredis (ALASREDIS6-2023-004)	Nessus	Amazon Linux Local Security Checks	high
166737	GLSA-202210-32 : hiredis, hiredis-py: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
155887	openSUSE 15 Security Update : hiredis (openSUSE-SU-2021:1536-1)	Nessus	SuSE Local Security Checks	high
154021	Debian DLA-2783-1 : hiredis - LTS security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2021-32765

high

Tenable Plugins

high

high

high

high

high