CVE Feed

    Dashboard / CVE / CVE-2022-3647

    CVE-2022-3647

    ** DISPUTED ** A vulnerability, which was classified as problematic, was found in Redis up to 6.2.7/7.0.5. Affected is the function sigsegvHandler of the file debug.c of the component Crash Report. The manipulation leads to denial of service. The complexity of an attack is rather high. The exploitability is told to be difficult. The real existence of this vulnerability is still doubted at the moment. Upgrading to version 6.2.8 and 7.0.6 is able to address this issue. The patch is identified as 0bf90d944313919eb8e63d3588bf63a367f020a3. It is recommended to apply a patch to fix this issue. VDB-211962 is the identifier assigned to this vulnerability. NOTE: The vendor claims that this is not a DoS because it applies to the crash logging mechanism which is triggered after a crash has occurred.

    Published:Oct 21, 2022
    Last Modified:Apr 15, 2025
    EPS:Oct 21, 2022
    EPSS Score:0.0013
    CVSS Score:3.1

    Affected Products

    Vendor
    Redis
    Product
    Redis

    Exploits

    https://github.com/redis/redis/commit/0bf90d944313919eb8e63d3588bf63a367f020a3https://github.com/redis/redis/commit/0bf90d944313919eb8e63d3588bf63a367f020a3

    Related CVEs

    CVE-2026-81934 (CVSS 7.5) — Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS…
    CVE-2026-72568 (CVSS 7.1) — Red Hat CNA-LR concluded that this CVE is not valid.…
    CVE-2026-66373 (CVSS 7.5) — Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote cod…
    CVE-2026-25243 (CVSS 7.7) — Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does …
    CVE-2026-23631 (CVSS 6.1) — Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticat…
    CVE-2026-23479 (CVSS 7.7) — Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow do…
    CVE-2025-62507 (CVSS 7.7) — Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run…
    CVE-2025-49844 (CVSS 9.9) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…
    CVE-2025-46819 (CVSS 6.3) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…
    CVE-2025-46818 (CVSS 6) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High