Summary
It was discovered that Hiredis did not check the return values of memory
allocation functions in some places, leading to a NULL pointer dereference.
An attacker could possibly use this issue to cause applications using
Hiredis to crash, resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | hiredis | 0.13.3-2ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | hiredis | 0.13.3-2.2ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return val…
References
-
report
https://ubuntu.com/security/CVE-2020-7105