Описание
The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging "limited access to the machine."
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux OpenStack Platform 6 (Juno) | redis | Not affected | ||
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | redis | Not affected | ||
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) Operational Tools | redis | Not affected | ||
| Red Hat Mobile Application Platform 4 | redis | Not affected | ||
| Red Hat OpenStack Platform 10 (Newton) | redis | Not affected | ||
| Red Hat OpenStack Platform 11 (Ocata) | redis | Not affected | ||
| Red Hat OpenStack Platform 12 (Pike) | redis | Not affected | ||
| Red Hat OpenStack Platform 8 (Liberty) | redis | Not affected | ||
| Red Hat OpenStack Platform 8 (Liberty) Operational Tools | redis | Not affected | ||
| Red Hat OpenStack Platform 9 (Mitaka) | redis | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
3.3 Low
CVSS3
Связанные уязвимости
The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging "limited access to the machine."
The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging "limited access to the machine."
The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows atta ...
The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging "limited access to the machine."
Уязвимость функции clusterLoadConfig (cluster.c) системы управления базами данных Redis, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
EPSS
3.3 Low
CVSS3