CVE-2020-7105: Null Pointer Dereference
Published Jan 16, 2020
·Updated
async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked.
Affected Software
4 affected components
Redislabs Hiredis<=0.14.0
Debian Debian Linux=8.0
Fedoraproject Fedora=30
Fedoraproject Fedora=31
Remediation
Patch Available
Event History
Jan 16, 2020
CVE Published
via MITRE·03:36 AM
Data Sourced
via MITRE·03:36 AM
Description
Data Sourced
via NVD·04:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2020-7105?
CVE-2020-7105 is a vulnerability in libhiredis.a in hiredis through version 0.14.0 that allows a NULL pointer dereference due to unchecked malloc return values.
2
How severe is CVE-2020-7105?
CVE-2020-7105 has a severity score of 7.5 (high).
3
Which software versions are affected by CVE-2020-7105?
The affected software versions include Redislabs Hiredis up to and including version 0.14.0, Debian Debian Linux version 8.0, and Fedora versions 30 and 31.
4
How can I fix CVE-2020-7105?
To fix CVE-2020-7105, you should update to a version of hiredis that is higher than 0.14.0.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2020-7105?
CVE-2020-7105 is associated with CWE-476, which is a vulnerability type related to NULL Pointer Dereference.