CVE-2022-3734: Redis on Windows dbghelp.dll uncontrolled search path

Published Oct 28, 2022

Updated

DISPUTED A vulnerability was found in a port or fork of Redis. It has been declared as critical. This vulnerability affects unknown code in the library C:/Program Files/Redis/dbghelp.dll. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier of this vulnerability is VDB-212416. NOTE: The official Redis release is not affected. This issue might affect an unofficial fork or port on Windows only.

Affected Software

3 affected components

Redis redis

All of the following

Redis redis

Microsoft Windows

Event History

Oct 28, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Disputed

08:15 AM

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2022-3734.

What is the severity of CVE-2022-3734?

CVE-2022-3734 has a severity rating of critical.

What software is affected by CVE-2022-3734?

The Redis software is affected by CVE-2022-3734.

How does CVE-2022-3734 affect the Redis software?

CVE-2022-3734 leads to uncontrolled search path in the Redis software.

Is CVE-2022-3734 exploitable remotely?

Yes, CVE-2022-3734 can be exploited remotely.

Where can I find more information about CVE-2022-3734?

You can find more information about CVE-2022-3734 at the following references: [1](https://vuldb.com/?id.212416) and [2](https://www.cnblogs.com/J0o1ey/p/16829380.html).

What is the Common Weakness Enumeration (CWE) ID for CVE-2022-3734?

CVE-2022-3734 is associated with CWE-426 and CWE-427.