Redis Stack-Based Buffer Overflow Vulnerability in redis-check-aof Allowing Potential Code Execution

A stack-based buffer overflow vulnerability has been identified in the Redis command-line tool redis-check-aof, affecting Redis versions 7.0.0 prior to 8.0.2. The vulnerability arises from the use of memcpy with strlen(filepath), which allows user-supplied file paths to overflow a fixed-size stack buffer. This could enable an attacker to manipulate the stack and execute arbitrary code.

Impact

Exploitation of this vulnerability can lead to a stack-based buffer overflow, with the potential for arbitrary code execution.

Reproduction

To reproduce this vulnerability, run the redis-check-aof command and provide a file path that exceeds the maximum allowed length. The tool will attempt to copy the path into a fixed-size stack buffer, causing a buffer overflow. This vulnerability exists in Redis versions 7.0.0 through 8.0.2.

Remediation

Users can upgrade to Redis version 8.0.2 or later, where this vulnerability has been patched.