Wind River Support Network

HomeDefectsLIN1021-4670

Acknowledged

LIN1021-4670 : Security Advisory - redis - CVE-2022-3734

Created: Oct 29, 2022 Updated: Oct 31, 2022

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

A vulnerability was found in Redis. It has been declared as critical. This vulnerability affects unknown code in the library C:/Program Files/Redis/dbghelp.dll. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212416.

CREATE(Triage):(User=admin) CVE-2022-3734 (https://nvd.nist.gov/vuln/detail/CVE-2022-3734)