ALT Linux Team

Package hiredis update in sisyphus on 2020-10-27

ALT-PU-2020-3137-1

Package hiredis updated to version 0.14.1-alt1 for branch sisyphus in task 260485.

Closed vulnerabilities

Published: 2020-01-16
Modified: 2024-11-21

CVE-2020-7105

async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top