CVE-2021-32761
redis: integer overflow issues with BITFIELD command on 32-bit systems
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 21, 2021
Updated · November 22, 2025
Description
A flaw was found in Redis. Issuing the BITFIELD command on a 32-bit version of Redis may result in an integer wrap around allowing an attacker to crash the service or perform remote code execution. The highest threat from this vulnerability is to the data confidentiality, integrity, and service availability.
Statement
This does not affect Redis 5 and Redis 6 packages shipped on Red Hat Enterprise Linux 7 and Red Hat Enterprise Linux 8, as they are 64-bit packages and the issue only affects 32-bit.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-190 · Integer Overflow or Wraparound