CVE-2024-55656 RedisBloom Integer Overflow Remote Code Execution Vulnerability
An integer overflow in RedisBloom allows authenticated attackers to trigger out-of-bounds writes, potentially leading to remote code execution or information disclosure.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-55656?
CVE-2024-55656 is a high-severity vulnerability in RedisBloom, published on 8 Jan 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
RedisBloom adds a set of probabilistic data structures to Redis. There is an integer overflow vulnerability in RedisBloom, which is a module used in Redis. The integer overflow vulnerability allows an attacker (a redis client which knows the password) to allocate memory in the heap lesser than the required memory due to wraparound. Then read and write can be performed beyond this allocated memory, leading to info leak and OOB write. The integer overflow is in CMS.INITBYDIM command, which initialize a Count-Min Sketch to dimensions specified by user. It accepts two values (width and depth) and uses them to allocate memory in NewCMSketch(). This vulnerability is fixed in 2.2.19, 2.4.12, 2.6.14, and 2.8.2.
Weakness: CWE-190
Which versions are affected by CVE-2024-55656?
How do I fix CVE-2024-55656?
No fix has been published for CVE-2024-55656 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-55656 being exploited?
There is no known exploitation of CVE-2024-55656 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-x5rx-rmq3-ff3h.