Wind River Support Network

HomeDefectsLIN1022-6224
Fixed

LIN1022-6224 : Security Advisory - redis - CVE-2023-41056

Created: Jan 9, 2024    Updated: Jun 3, 2025
Resolved Date: May 28, 2025
Found In Version: 10.22.33.1
Fix Version: 10.22.33.21
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.

https://nvd.nist.gov/vuln/detail/CVE-2023-41056

CVEs


Live chat
Online