{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "potential heap overflow when using a heap allocator other than jemalloc or glibc's malloc", "tracking": { "current_release_date": "2026-08-11T14:55:29+00:00", "generator": { "date": "2026-08-11T14:55:29+00:00", "engine": { "name": "CSAF Generator", "version": "3.3.0" } }, "id": "CVE-2021-3470", "initial_release_date": "2020-10-26T00:00:00+00:00", "revision_history": [ { "date": "2026-08-11T14:55:29+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Ansible Automation Platform 1.2", "product": { "name": "Red Hat Ansible Automation Platform 1.2", "product_id": "ansible_automation_platform-1.2", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform" } } }, { "category": "product_name", "name": "Red Hat Ansible Tower 3.6", "product": { "name": "Red Hat Ansible Tower 3.6", "product_id": "ansible_tower-3.6", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_tower:3" } } }, { "category": "product_name", "name": "Red Hat Ansible Tower 3.7", "product": { "name": "Red Hat Ansible Tower 3.7", "product_id": "ansible_tower-3.7", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_tower:3" } } }, { "category": "product_name", "name": "Red Hat OpenStack Platform 10.0 (Newton)", "product": { "name": "Red Hat OpenStack Platform 10.0 (Newton)", "product_id": "openstack-10-default", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:10" } } }, { "category": "product_name", "name": "Red Hat OpenStack Platform 13.0 (Queens)", "product": { "name": "Red Hat OpenStack Platform 13.0 (Queens)", "product_id": "openstack-13-default", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:13" } } }, { "category": "product_name", "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product": { "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product_id": "rhacm-2.11.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:acm:2.11" } } }, { "category": "product_name", "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product": { "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product_id": "rhacm-2.12.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:acm:2.12" } } }, { "category": "product_name", "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product": { "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product_id": "rhacm-2.13.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:acm:2.13" } } }, { "category": "product_name", "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product": { "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product_id": "rhacm-2.14", "product_identification_helper": { "cpe": "cpe:/a:redhat:acm:2.14" } } }, { "category": "product_name", "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product": { "name": "Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product_id": "rhacm-2.15", "product_identification_helper": { "cpe": "cpe:/a:redhat:acm:2.15" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10.z", "product": { "name": "Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.2" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.6.0.z", "product": { "name": "Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.8.0.z", "product": { "name": "Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.0.0.z", "product": { "name": "Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.0" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.2.0.z", "product": { "name": "Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.2" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.4.z", "product": { "name": "Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.6.z", "product": { "name": "Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.7", "product": { "name": "Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.7.z", "product": { "name": "Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.8", "product": { "name": "Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Software Collections", "product": { "name": "Red Hat Software Collections", "product_id": "rhscl-3", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3" } } }, { "category": "product_version", "name": "redis", "product": { "name": "redis", "product_id": "redis", "product_identification_helper": { "purl": "pkg:rpm/redhat/redis" } } }, { "category": "product_version", "name": "redis-debuginfo", "product": { "name": "redis-debuginfo", "product_id": "redis-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/redis-debuginfo" } } }, { "category": "product_version", "name": "redis-debugsource", "product": { "name": "redis-debugsource", "product_id": "redis-debugsource", "product_identification_helper": { "purl": "pkg:rpm/redhat/redis-debugsource" } } }, { "category": "product_version", "name": "redis-devel", "product": { "name": "redis-devel", "product_id": "redis-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/redis-devel" } } }, { "category": "product_version", "name": "redis-doc", "product": { "name": "redis-doc", "product_id": "redis-doc", "product_identification_helper": { "purl": "pkg:rpm/redhat/redis-doc" } } }, { "category": "product_version", "name": "redis", "product": { "name": "redis", "product_id": "redis.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/redis?arch=src" } } }, { "category": "product_version", "name": "redis:5/redis", "product": { "name": "redis:5/redis", "product_id": "redis:5/redis.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/redis?arch=src&rpmmod=redis:5" } } }, { "category": "product_version", "name": "redis:6/redis", "product": { "name": "redis:6/redis", "product_id": "redis:6/redis.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/redis?arch=src&rpmmod=redis:6" } } }, { "category": "product_version", "name": "redisgraph-tls", "product": { "name": "redisgraph-tls", "product_id": "redisgraph-tls.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/redisgraph-tls?arch=src" } } }, { "category": "product_version", "name": "rh-redis5-redis", "product": { "name": "rh-redis5-redis", "product_id": "rh-redis5-redis", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-redis5-redis" } } }, { "category": "product_version", "name": "rh-redis5-redis", "product": { "name": "rh-redis5-redis", "product_id": "rh-redis5-redis.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-redis5-redis?arch=src" } } }, { "category": "product_version", "name": "search-api", "product": { "name": "search-api", "product_id": "search-api.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/search-api?arch=src" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "redis as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:redis" }, "product_reference": "redis", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "redis as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:redis" }, "product_reference": "redis", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:redis" }, "product_reference": "redis", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:redis" }, "product_reference": "redis", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:redis" }, "product_reference": "redis", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:redis" }, "product_reference": "redis", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "redis as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:redis" }, "product_reference": "redis", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "redis as a component of Red Hat OpenStack Platform 10.0 (Newton)", "product_id": "openstack-10-default:redis" }, "product_reference": "redis", "relates_to_product_reference": "openstack-10-default" }, { "category": "default_component_of", "full_product_name": { "name": "redis as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:redis" }, "product_reference": "redis", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:redis" }, "product_reference": "redis", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis as a component of Red Hat OpenStack Platform 13.0 (Queens)", "product_id": "openstack-13-default:redis" }, "product_reference": "redis", "relates_to_product_reference": "openstack-13-default" }, { "category": "default_component_of", "full_product_name": { "name": "redis as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:redis" }, "product_reference": "redis", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "redis as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:redis" }, "product_reference": "redis", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "redis as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:redis" }, "product_reference": "redis", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "redis-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:redis-debuginfo" }, "product_reference": "redis-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:redis-debuginfo" }, "product_reference": "redis-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:redis-debuginfo" }, "product_reference": "redis-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:redis-debuginfo" }, "product_reference": "redis-debuginfo", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-debuginfo as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:redis-debuginfo" }, "product_reference": "redis-debuginfo", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "redis-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:redis-debuginfo" }, "product_reference": "redis-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:redis-debuginfo" }, "product_reference": "redis-debuginfo", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-debugsource as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:redis-debugsource" }, "product_reference": "redis-debugsource", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-debugsource as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:redis-debugsource" }, "product_reference": "redis-debugsource", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-debugsource as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:redis-debugsource" }, "product_reference": "redis-debugsource", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "redis-debugsource as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:redis-debugsource" }, "product_reference": "redis-debugsource", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-debugsource as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:redis-debugsource" }, "product_reference": "redis-debugsource", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-debugsource as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:redis-debugsource" }, "product_reference": "redis-debugsource", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-debugsource as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:redis-debugsource" }, "product_reference": "redis-debugsource", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-devel as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:redis-devel" }, "product_reference": "redis-devel", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "redis-devel as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:redis-devel" }, "product_reference": "redis-devel", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-devel as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:redis-devel" }, "product_reference": "redis-devel", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-devel as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:redis-devel" }, "product_reference": "redis-devel", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-devel as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:redis-devel" }, "product_reference": "redis-devel", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-devel as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:redis-devel" }, "product_reference": "redis-devel", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-devel as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:redis-devel" }, "product_reference": "redis-devel", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-devel as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:redis-devel" }, "product_reference": "redis-devel", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "redis-devel as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:redis-devel" }, "product_reference": "redis-devel", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "redis-devel as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:redis-devel" }, "product_reference": "redis-devel", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-devel as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:redis-devel" }, "product_reference": "redis-devel", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-devel as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:redis-devel" }, "product_reference": "redis-devel", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "redis-doc as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:redis-doc" }, "product_reference": "redis-doc", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "redis-doc as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:redis-doc" }, "product_reference": "redis-doc", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-doc as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:redis-doc" }, "product_reference": "redis-doc", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-doc as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:redis-doc" }, "product_reference": "redis-doc", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "redis-doc as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:redis-doc" }, "product_reference": "redis-doc", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-doc as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:redis-doc" }, "product_reference": "redis-doc", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "redis-doc as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:redis-doc" }, "product_reference": "redis-doc", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-doc as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:redis-doc" }, "product_reference": "redis-doc", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-doc as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:redis-doc" }, "product_reference": "redis-doc", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-doc as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:redis-doc" }, "product_reference": "redis-doc", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-doc as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:redis-doc" }, "product_reference": "redis-doc", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "redis-doc as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:redis-doc" }, "product_reference": "redis-doc", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "redis.src as a component of Red Hat Ansible Tower 3.6", "product_id": "ansible_tower-3.6:redis.src" }, "product_reference": "redis.src", "relates_to_product_reference": "ansible_tower-3.6" }, { "category": "default_component_of", "full_product_name": { "name": "redis.src as a component of Red Hat OpenStack Platform 10.0 (Newton)", "product_id": "openstack-10-default:redis.src" }, "product_reference": "redis.src", "relates_to_product_reference": "openstack-10-default" }, { "category": "default_component_of", "full_product_name": { "name": "redis.src as a component of Red Hat Ansible Tower 3.7", "product_id": "ansible_tower-3.7:redis.src" }, "product_reference": "redis.src", "relates_to_product_reference": "ansible_tower-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "redis.src as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:redis.src" }, "product_reference": "redis.src", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis.src as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:redis.src" }, "product_reference": "redis.src", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis.src as a component of Red Hat Ansible Automation Platform 1.2", "product_id": "ansible_automation_platform-1.2:redis.src" }, "product_reference": "redis.src", "relates_to_product_reference": "ansible_automation_platform-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "redis.src as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:redis.src" }, "product_reference": "redis.src", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "redis.src as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:redis.src" }, "product_reference": "redis.src", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis.src as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:redis.src" }, "product_reference": "redis.src", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis.src as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:redis.src" }, "product_reference": "redis.src", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "redis.src as a component of Red Hat OpenStack Platform 13.0 (Queens)", "product_id": "openstack-13-default:redis.src" }, "product_reference": "redis.src", "relates_to_product_reference": "openstack-13-default" }, { "category": "default_component_of", "full_product_name": { "name": "redis.src as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:redis.src" }, "product_reference": "redis.src", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "redis:5/redis.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:redis:5/redis.src" }, "product_reference": "redis:5/redis.src", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "redis:5/redis.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:redis:5/redis.src" }, "product_reference": "redis:5/redis.src", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "redis:5/redis.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:redis:5/redis.src" }, "product_reference": "redis:5/redis.src", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis:5/redis.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:redis:5/redis.src" }, "product_reference": "redis:5/redis.src", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "redis:5/redis.src as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:redis:5/redis.src" }, "product_reference": "redis:5/redis.src", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis:6/redis.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8.10.z:redis:6/redis.src" }, "product_reference": "redis:6/redis.src", "relates_to_product_reference": "rhel-8.10.z" }, { "category": "default_component_of", "full_product_name": { "name": "redis:6/redis.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:redis:6/redis.src" }, "product_reference": "redis:6/redis.src", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "redis:6/redis.src as a component of Red Hat Enterprise Linux 8.8.0.z", "product_id": "rhel-8.8.0.z.eus:redis:6/redis.src" }, "product_reference": "redis:6/redis.src", "relates_to_product_reference": "rhel-8.8.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis:6/redis.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:redis:6/redis.src" }, "product_reference": "redis:6/redis.src", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "redis:6/redis.src as a component of Red Hat Enterprise Linux 8.6.0.z", "product_id": "rhel-8.6.0.z.aus:redis:6/redis.src" }, "product_reference": "redis:6/redis.src", "relates_to_product_reference": "rhel-8.6.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "redisgraph-tls.src as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product_id": "rhacm-2.12.z:redisgraph-tls.src" }, "product_reference": "redisgraph-tls.src", "relates_to_product_reference": "rhacm-2.12.z" }, { "category": "default_component_of", "full_product_name": { "name": "redisgraph-tls.src as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product_id": "rhacm-2.13.z:redisgraph-tls.src" }, "product_reference": "redisgraph-tls.src", "relates_to_product_reference": "rhacm-2.13.z" }, { "category": "default_component_of", "full_product_name": { "name": "redisgraph-tls.src as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product_id": "rhacm-2.11.z:redisgraph-tls.src" }, "product_reference": "redisgraph-tls.src", "relates_to_product_reference": "rhacm-2.11.z" }, { "category": "default_component_of", "full_product_name": { "name": "redisgraph-tls.src as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product_id": "rhacm-2.14:redisgraph-tls.src" }, "product_reference": "redisgraph-tls.src", "relates_to_product_reference": "rhacm-2.14" }, { "category": "default_component_of", "full_product_name": { "name": "redisgraph-tls.src as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product_id": "rhacm-2.15:redisgraph-tls.src" }, "product_reference": "redisgraph-tls.src", "relates_to_product_reference": "rhacm-2.15" }, { "category": "default_component_of", "full_product_name": { "name": "rh-redis5-redis as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-redis5-redis" }, "product_reference": "rh-redis5-redis", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "rh-redis5-redis.src as a component of Red Hat Software Collections", "product_id": "rhscl-3:rh-redis5-redis.src" }, "product_reference": "rh-redis5-redis.src", "relates_to_product_reference": "rhscl-3" }, { "category": "default_component_of", "full_product_name": { "name": "search-api.src as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.12.0", "product_id": "rhacm-2.12.z:search-api.src" }, "product_reference": "search-api.src", "relates_to_product_reference": "rhacm-2.12.z" }, { "category": "default_component_of", "full_product_name": { "name": "search-api.src as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.13.0", "product_id": "rhacm-2.13.z:search-api.src" }, "product_reference": "search-api.src", "relates_to_product_reference": "rhacm-2.13.z" }, { "category": "default_component_of", "full_product_name": { "name": "search-api.src as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.11.0", "product_id": "rhacm-2.11.z:search-api.src" }, "product_reference": "search-api.src", "relates_to_product_reference": "rhacm-2.11.z" }, { "category": "default_component_of", "full_product_name": { "name": "search-api.src as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.14.0", "product_id": "rhacm-2.14:search-api.src" }, "product_reference": "search-api.src", "relates_to_product_reference": "rhacm-2.14" }, { "category": "default_component_of", "full_product_name": { "name": "search-api.src as a component of Red Hat Advanced Cluster Management for Kubernetes ACM 2.15.0", "product_id": "rhacm-2.15:search-api.src" }, "product_reference": "search-api.src", "relates_to_product_reference": "rhacm-2.15" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-3470", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2021-02-18T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "ansible_automation_platform-1.2:redis.src", "ansible_tower-3.6:redis.src", "ansible_tower-3.7:redis.src", "rhacm-2.11.z:redisgraph-tls.src", "rhacm-2.11.z:search-api.src", "rhacm-2.12.z:redisgraph-tls.src", "rhacm-2.12.z:search-api.src", "rhacm-2.13.z:redisgraph-tls.src", "rhacm-2.13.z:search-api.src", "rhacm-2.14:redisgraph-tls.src", "rhacm-2.14:search-api.src", "rhacm-2.15:redisgraph-tls.src", "rhacm-2.15:search-api.src", "rhel-8.10.z:redis", "rhel-8.10.z:redis-debuginfo", "rhel-8.10.z:redis-debugsource", "rhel-8.10.z:redis-devel", "rhel-8.10.z:redis-doc", "rhel-8.10.z:redis:5/redis.src", "rhel-8.10.z:redis:6/redis.src", "rhel-8.2.0.z.aus:redis", "rhel-8.2.0.z.aus:redis-devel", "rhel-8.2.0.z.aus:redis-doc", "rhel-8.2.0.z.aus:redis:5/redis.src", "rhel-8.2.0.z.aus:redis:6/redis.src", "rhel-8.4.0.z.eus:redis", "rhel-8.4.0.z.eus:redis-debuginfo", "rhel-8.4.0.z.eus:redis-debugsource", "rhel-8.4.0.z.eus:redis-devel", "rhel-8.4.0.z.eus:redis-doc", "rhel-8.4.0.z.eus:redis:5/redis.src", "rhel-8.4.0.z.eus:redis:6/redis.src", "rhel-8.6.0.z.aus:redis", "rhel-8.6.0.z.aus:redis-debuginfo", "rhel-8.6.0.z.aus:redis-debugsource", "rhel-8.6.0.z.aus:redis-devel", "rhel-8.6.0.z.aus:redis-doc", "rhel-8.6.0.z.aus:redis:5/redis.src", "rhel-8.6.0.z.aus:redis:6/redis.src", "rhel-8.8.0.z.eus:redis", "rhel-8.8.0.z.eus:redis-debuginfo", "rhel-8.8.0.z.eus:redis-debugsource", "rhel-8.8.0.z.eus:redis-devel", "rhel-8.8.0.z.eus:redis-doc", "rhel-8.8.0.z.eus:redis:5/redis.src", "rhel-8.8.0.z.eus:redis:6/redis.src", "rhel-9.0.0.z.eus:redis", "rhel-9.0.0.z.eus:redis-devel", "rhel-9.0.0.z.eus:redis-doc", "rhel-9.0.0.z.eus:redis.src", "rhel-9.2.0.z.eus:redis", "rhel-9.2.0.z.eus:redis-debuginfo", "rhel-9.2.0.z.eus:redis-debugsource", "rhel-9.2.0.z.eus:redis-devel", "rhel-9.2.0.z.eus:redis-doc", "rhel-9.2.0.z.eus:redis.src", "rhel-9.4.z.eus:redis", "rhel-9.4.z.eus:redis-debuginfo", "rhel-9.4.z.eus:redis-debugsource", "rhel-9.4.z.eus:redis-devel", "rhel-9.4.z.eus:redis-doc", "rhel-9.4.z.eus:redis.src", "rhel-9.6.z.eus:redis", "rhel-9.6.z.eus:redis-debuginfo", "rhel-9.6.z.eus:redis-debugsource", "rhel-9.6.z.eus:redis-devel", "rhel-9.6.z.eus:redis-doc", "rhel-9.6.z.eus:redis.src", "rhel-9.7.z:redis", "rhel-9.7.z:redis-devel", "rhel-9.7.z:redis-doc", "rhel-9.7.z:redis.src", "rhel-9.7:redis", "rhel-9.7:redis-devel", "rhel-9.7:redis-doc", "rhel-9.7:redis.src", "rhel-9.8:redis", "rhel-9.8:redis-devel", "rhel-9.8:redis-doc", "rhel-9.8:redis.src", "rhscl-3:rh-redis5-redis", "rhscl-3:rh-redis5-redis.src" ] } ], "notes": [ { "category": "other", "text": "The following products are not affected by this flaw because they use `jemalloc` as default heap allocator:\n* Red Hat Enterprise Linux 8\n* Red Hat Software Collections\n* Red Hat Advanced Cluster Management for Kubernetes\n\nIn Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP redis package.", "title": "Statement" }, { "category": "description", "text": "A heap overflow issue was found in Redis when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use jemalloc or glibc.", "title": "Vulnerability description" } ], "product_status": { "known_affected": [ "openstack-10-default:redis", "openstack-10-default:redis.src", "openstack-13-default:redis", "openstack-13-default:redis.src" ], "known_not_affected": [ "ansible_automation_platform-1.2:redis.src", "ansible_tower-3.6:redis.src", "ansible_tower-3.7:redis.src", "rhacm-2.11.z:redisgraph-tls.src", "rhacm-2.11.z:search-api.src", "rhacm-2.12.z:redisgraph-tls.src", "rhacm-2.12.z:search-api.src", "rhacm-2.13.z:redisgraph-tls.src", "rhacm-2.13.z:search-api.src", "rhacm-2.14:redisgraph-tls.src", "rhacm-2.14:search-api.src", "rhacm-2.15:redisgraph-tls.src", "rhacm-2.15:search-api.src", "rhel-8.10.z:redis", "rhel-8.10.z:redis-debuginfo", "rhel-8.10.z:redis-debugsource", "rhel-8.10.z:redis-devel", "rhel-8.10.z:redis-doc", "rhel-8.10.z:redis:5/redis.src", "rhel-8.10.z:redis:6/redis.src", "rhel-8.2.0.z.aus:redis", "rhel-8.2.0.z.aus:redis-devel", "rhel-8.2.0.z.aus:redis-doc", "rhel-8.2.0.z.aus:redis:5/redis.src", "rhel-8.2.0.z.aus:redis:6/redis.src", "rhel-8.4.0.z.eus:redis", "rhel-8.4.0.z.eus:redis-debuginfo", "rhel-8.4.0.z.eus:redis-debugsource", "rhel-8.4.0.z.eus:redis-devel", "rhel-8.4.0.z.eus:redis-doc", "rhel-8.4.0.z.eus:redis:5/redis.src", "rhel-8.4.0.z.eus:redis:6/redis.src", "rhel-8.6.0.z.aus:redis", "rhel-8.6.0.z.aus:redis-debuginfo", "rhel-8.6.0.z.aus:redis-debugsource", "rhel-8.6.0.z.aus:redis-devel", "rhel-8.6.0.z.aus:redis-doc", "rhel-8.6.0.z.aus:redis:5/redis.src", "rhel-8.6.0.z.aus:redis:6/redis.src", "rhel-8.8.0.z.eus:redis", "rhel-8.8.0.z.eus:redis-debuginfo", "rhel-8.8.0.z.eus:redis-debugsource", "rhel-8.8.0.z.eus:redis-devel", "rhel-8.8.0.z.eus:redis-doc", "rhel-8.8.0.z.eus:redis:5/redis.src", "rhel-8.8.0.z.eus:redis:6/redis.src", "rhel-9.0.0.z.eus:redis", "rhel-9.0.0.z.eus:redis-devel", "rhel-9.0.0.z.eus:redis-doc", "rhel-9.0.0.z.eus:redis.src", "rhel-9.2.0.z.eus:redis", "rhel-9.2.0.z.eus:redis-debuginfo", "rhel-9.2.0.z.eus:redis-debugsource", "rhel-9.2.0.z.eus:redis-devel", "rhel-9.2.0.z.eus:redis-doc", "rhel-9.2.0.z.eus:redis.src", "rhel-9.4.z.eus:redis", "rhel-9.4.z.eus:redis-debuginfo", "rhel-9.4.z.eus:redis-debugsource", "rhel-9.4.z.eus:redis-devel", "rhel-9.4.z.eus:redis-doc", "rhel-9.4.z.eus:redis.src", "rhel-9.6.z.eus:redis", "rhel-9.6.z.eus:redis-debuginfo", "rhel-9.6.z.eus:redis-debugsource", "rhel-9.6.z.eus:redis-devel", "rhel-9.6.z.eus:redis-doc", "rhel-9.6.z.eus:redis.src", "rhel-9.7.z:redis", "rhel-9.7.z:redis-devel", "rhel-9.7.z:redis-doc", "rhel-9.7.z:redis.src", "rhel-9.7:redis", "rhel-9.7:redis-devel", "rhel-9.7:redis-doc", "rhel-9.7:redis.src", "rhel-9.8:redis", "rhel-9.8:redis-devel", "rhel-9.8:redis-doc", "rhel-9.8:redis.src", "rhscl-3:rh-redis5-redis", "rhscl-3:rh-redis5-redis.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-3470" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3470" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2021-3470" } ], "remediations": [ { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "openstack-10-default:redis", "openstack-10-default:redis.src", "openstack-13-default:redis", "openstack-13-default:redis.src" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM" }, "products": [ "ansible_automation_platform-1.2:redis.src", "ansible_tower-3.6:redis.src", "ansible_tower-3.7:redis.src", "openstack-10-default:redis", "openstack-10-default:redis.src", "openstack-13-default:redis", "openstack-13-default:redis.src", "rhacm-2.11.z:redisgraph-tls.src", "rhacm-2.11.z:search-api.src", "rhacm-2.12.z:redisgraph-tls.src", "rhacm-2.12.z:search-api.src", "rhacm-2.13.z:redisgraph-tls.src", "rhacm-2.13.z:search-api.src", "rhacm-2.14:redisgraph-tls.src", "rhacm-2.14:search-api.src", "rhacm-2.15:redisgraph-tls.src", "rhacm-2.15:search-api.src", "rhel-8.10.z:redis", "rhel-8.10.z:redis-debuginfo", "rhel-8.10.z:redis-debugsource", "rhel-8.10.z:redis-devel", "rhel-8.10.z:redis-doc", "rhel-8.10.z:redis:5/redis.src", "rhel-8.10.z:redis:6/redis.src", "rhel-8.2.0.z.aus:redis", "rhel-8.2.0.z.aus:redis-devel", "rhel-8.2.0.z.aus:redis-doc", "rhel-8.2.0.z.aus:redis:5/redis.src", "rhel-8.2.0.z.aus:redis:6/redis.src", "rhel-8.4.0.z.eus:redis", "rhel-8.4.0.z.eus:redis-debuginfo", "rhel-8.4.0.z.eus:redis-debugsource", "rhel-8.4.0.z.eus:redis-devel", "rhel-8.4.0.z.eus:redis-doc", "rhel-8.4.0.z.eus:redis:5/redis.src", "rhel-8.4.0.z.eus:redis:6/redis.src", "rhel-8.6.0.z.aus:redis", "rhel-8.6.0.z.aus:redis-debuginfo", "rhel-8.6.0.z.aus:redis-debugsource", "rhel-8.6.0.z.aus:redis-devel", "rhel-8.6.0.z.aus:redis-doc", "rhel-8.6.0.z.aus:redis:5/redis.src", "rhel-8.6.0.z.aus:redis:6/redis.src", "rhel-8.8.0.z.eus:redis", "rhel-8.8.0.z.eus:redis-debuginfo", "rhel-8.8.0.z.eus:redis-debugsource", "rhel-8.8.0.z.eus:redis-devel", "rhel-8.8.0.z.eus:redis-doc", "rhel-8.8.0.z.eus:redis:5/redis.src", "rhel-8.8.0.z.eus:redis:6/redis.src", "rhel-9.0.0.z.eus:redis", "rhel-9.0.0.z.eus:redis-devel", "rhel-9.0.0.z.eus:redis-doc", "rhel-9.0.0.z.eus:redis.src", "rhel-9.2.0.z.eus:redis", "rhel-9.2.0.z.eus:redis-debuginfo", "rhel-9.2.0.z.eus:redis-debugsource", "rhel-9.2.0.z.eus:redis-devel", "rhel-9.2.0.z.eus:redis-doc", "rhel-9.2.0.z.eus:redis.src", "rhel-9.4.z.eus:redis", "rhel-9.4.z.eus:redis-debuginfo", "rhel-9.4.z.eus:redis-debugsource", "rhel-9.4.z.eus:redis-devel", "rhel-9.4.z.eus:redis-doc", "rhel-9.4.z.eus:redis.src", "rhel-9.6.z.eus:redis", "rhel-9.6.z.eus:redis-debuginfo", "rhel-9.6.z.eus:redis-debugsource", "rhel-9.6.z.eus:redis-devel", "rhel-9.6.z.eus:redis-doc", "rhel-9.6.z.eus:redis.src", "rhel-9.7.z:redis", "rhel-9.7.z:redis-devel", "rhel-9.7.z:redis-doc", "rhel-9.7.z:redis.src", "rhel-9.7:redis", "rhel-9.7:redis-devel", "rhel-9.7:redis-doc", "rhel-9.7:redis.src", "rhel-9.8:redis", "rhel-9.8:redis-devel", "rhel-9.8:redis-doc", "rhel-9.8:redis.src", "rhscl-3:rh-redis5-redis", "rhscl-3:rh-redis5-redis.src" ] } ], "threats": [ { "category": "impact", "details": "Low", "product_ids": [ "ansible_automation_platform-1.2:redis.src", "ansible_tower-3.6:redis.src", "ansible_tower-3.7:redis.src", "openstack-10-default:redis", "openstack-10-default:redis.src", "openstack-13-default:redis", "openstack-13-default:redis.src", "rhacm-2.11.z:redisgraph-tls.src", "rhacm-2.11.z:search-api.src", "rhacm-2.12.z:redisgraph-tls.src", "rhacm-2.12.z:search-api.src", "rhacm-2.13.z:redisgraph-tls.src", "rhacm-2.13.z:search-api.src", "rhacm-2.14:redisgraph-tls.src", "rhacm-2.14:search-api.src", "rhacm-2.15:redisgraph-tls.src", "rhacm-2.15:search-api.src", "rhel-8.10.z:redis", "rhel-8.10.z:redis-debuginfo", "rhel-8.10.z:redis-debugsource", "rhel-8.10.z:redis-devel", "rhel-8.10.z:redis-doc", "rhel-8.10.z:redis:5/redis.src", "rhel-8.10.z:redis:6/redis.src", "rhel-8.2.0.z.aus:redis", "rhel-8.2.0.z.aus:redis-devel", "rhel-8.2.0.z.aus:redis-doc", "rhel-8.2.0.z.aus:redis:5/redis.src", "rhel-8.2.0.z.aus:redis:6/redis.src", "rhel-8.4.0.z.eus:redis", "rhel-8.4.0.z.eus:redis-debuginfo", "rhel-8.4.0.z.eus:redis-debugsource", "rhel-8.4.0.z.eus:redis-devel", "rhel-8.4.0.z.eus:redis-doc", "rhel-8.4.0.z.eus:redis:5/redis.src", "rhel-8.4.0.z.eus:redis:6/redis.src", "rhel-8.6.0.z.aus:redis", "rhel-8.6.0.z.aus:redis-debuginfo", "rhel-8.6.0.z.aus:redis-debugsource", "rhel-8.6.0.z.aus:redis-devel", "rhel-8.6.0.z.aus:redis-doc", "rhel-8.6.0.z.aus:redis:5/redis.src", "rhel-8.6.0.z.aus:redis:6/redis.src", "rhel-8.8.0.z.eus:redis", "rhel-8.8.0.z.eus:redis-debuginfo", "rhel-8.8.0.z.eus:redis-debugsource", "rhel-8.8.0.z.eus:redis-devel", "rhel-8.8.0.z.eus:redis-doc", "rhel-8.8.0.z.eus:redis:5/redis.src", "rhel-8.8.0.z.eus:redis:6/redis.src", "rhel-9.0.0.z.eus:redis", "rhel-9.0.0.z.eus:redis-devel", "rhel-9.0.0.z.eus:redis-doc", "rhel-9.0.0.z.eus:redis.src", "rhel-9.2.0.z.eus:redis", "rhel-9.2.0.z.eus:redis-debuginfo", "rhel-9.2.0.z.eus:redis-debugsource", "rhel-9.2.0.z.eus:redis-devel", "rhel-9.2.0.z.eus:redis-doc", "rhel-9.2.0.z.eus:redis.src", "rhel-9.4.z.eus:redis", "rhel-9.4.z.eus:redis-debuginfo", "rhel-9.4.z.eus:redis-debugsource", "rhel-9.4.z.eus:redis-devel", "rhel-9.4.z.eus:redis-doc", "rhel-9.4.z.eus:redis.src", "rhel-9.6.z.eus:redis", "rhel-9.6.z.eus:redis-debuginfo", "rhel-9.6.z.eus:redis-debugsource", "rhel-9.6.z.eus:redis-devel", "rhel-9.6.z.eus:redis-doc", "rhel-9.6.z.eus:redis.src", "rhel-9.7.z:redis", "rhel-9.7.z:redis-devel", "rhel-9.7.z:redis-doc", "rhel-9.7.z:redis.src", "rhel-9.7:redis", "rhel-9.7:redis-devel", "rhel-9.7:redis-doc", "rhel-9.7:redis.src", "rhel-9.8:redis", "rhel-9.8:redis-devel", "rhel-9.8:redis-doc", "rhel-9.8:redis.src", "rhscl-3:rh-redis5-redis", "rhscl-3:rh-redis5-redis.src" ] } ], "title": "potential heap overflow when using a heap allocator other than jemalloc or glibc's malloc" } ] }