CyberRota Analysis
AI-GeneratedThe vulnerability affects the valkey-io valkey versions up to 9.0.5/9.1.1, specifically in the kvstoreGetHashtable function, which can lead to an out-of-bounds read due to argument manipulation. While the attack requires high complexity and specific conditions, such as cluster mode and controlled RDB files, the public availability of the exploit necessitates that organizations using these versions prioritize applying the provided patch to mitigate potential risks. Users concerned with memory safety and system integrity should address this vulnerability promptly.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks. Patch name: 4691888e7fab3df128f0bde5750c9fde2ae552fa. To fix this issue, it is recommended to deploy a patch. Exploitation requires cluster mode plus attacker-controlled dump.rdb at startup (data-dir write access, replication feed, or a stored crafted RDB) - an attacker-position DoS at boot, not network pre-auth. The issue report was closed stating it "is worth fixing for the sake of memory safety… but I don't think it meets our bar for a security disclosure."