Redis Security Notice: Heap Overflow Vulnerabilities

[sorangutan]

Here’s what you need to do about the CVE-2022-24834 and CVE-2023-36824 vulnerabilities, as well as the updates available for affected customers. We were made aware that Redis was affected by two security vulnerabilities, CVE-2022-24834 and CVE-2023-36824. CVE-2022-24834 uses a specially crafted Lua script in Redis that can trigger a heap overflow in the cJSON and […]

The post Redis Security Notice: Heap Overflow Vulnerabilities appeared first on Redis.

https://redis.com/blog/security-notice-heap-overflow-vulnerabilties/