CVE-2020-7105 Null dereference in n/a
A NULL pointer dereference in the hiredis library allows attackers to cause a denial of service by triggering unchecked malloc failures.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-7105?
CVE-2020-7105 is a high-severity vulnerability in Debian Debian Linux, published on 16 Jan 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked.
Weakness: CWE-476
Which versions are affected by CVE-2020-7105?
It affects 3 products.
Linux distribution packages (1)
hiredis openSUSE:Tumbleweed | All versions | 1.0.0-2.6 |
Products include Debian Debian Linux, Fedoraproject Fedora, Redislabs Hiredis.
How do I fix CVE-2020-7105?
Apply the vendor's patch.
Is CVE-2020-7105 being exploited?
There is no known exploitation of CVE-2020-7105 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2020-7105, DLA-2083-1, GHSA-cjp9-9h2g-g3x5, MGASA-2020-0109, UBUNTU-CVE-2020-7105, openSUSE-SU-2024:10844-1.