Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-36021. PoCs published by qwqqaqqwq00.
AI-analyzed exploit summary This repository contains Redis source code files and documentation generation scripts, but no actual exploit code or technical analysis for CVE-2022-36021. The files are related to Redis module API documentation and Lua scripting engine internals, not the vulnerability itself.
Description
Redis is an in-memory database that persists on disk. Authenticated users can use string matching commands (like `SCAN` or `KEYS`) with a specially crafted pattern to trigger a denial-of-service attack on Redis, causing it to hang and consume 100% CPU time. The problem is fixed in Redis versions 6.0.18, 6.2.11, 7.0.9.
Exploits (1)
This repository contains Redis source code files and documentation generation scripts, but no actual exploit code or technical analysis for CVE-2022-36021. The files are related to Redis module API documentation and Lua scripting engine internals, not the vulnerability itself.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H