Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-12326

Опубликовано: 17 июн. 2018
Источник: nvd
CVSS3: 8.4
CVSS2: 4.6
EPSS Средний

Описание

Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution and escalate to higher privileges via a crafted command line. NOTE: It is unclear whether there are any common situations in which redis-cli is used with, for example, a -h (aka hostname) argument from an untrusted source.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*
Версия до 4.0.10 (исключая)
cpe:2.3:a:redislabs:redis:5.0:rc1:*:*:*:*:*:*
cpe:2.3:a:redislabs:redis:5.0:rc2:*:*:*:*:*:*

EPSS

Процентиль: 96%
0.28107
Средний

8.4 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 8.4
ubuntu
больше 7 лет назад

Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution and escalate to higher privileges via a crafted command line. NOTE: It is unclear whether there are any common situations in which redis-cli is used with, for example, a -h (aka hostname) argument from an untrusted source.

CVSS3: 3.3
redhat
больше 7 лет назад

Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution and escalate to higher privileges via a crafted command line. NOTE: It is unclear whether there are any common situations in which redis-cli is used with, for example, a -h (aka hostname) argument from an untrusted source.

CVSS3: 8.4
debian
больше 7 лет назад

Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 ...

CVSS3: 8.4
github
больше 3 лет назад

Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution and escalate to higher privileges via a crafted command line. NOTE: It is unclear whether there are any common situations in which redis-cli is used with, for example, a -h (aka hostname) argument from an untrusted source.

CVSS3: 8.4
fstec
больше 7 лет назад

Уязвимость интерфейса redis-cli системы управления базами данных (СУБД) Redis, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

EPSS

Процентиль: 96%
0.28107
Средний

8.4 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-119