Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-15047

Опубликовано: 31 авг. 2017
Источник: redhat
CVSS3: 3.3

Описание

The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging "limited access to the machine."

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux OpenStack Platform 6 (Juno)redisNot affected
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)redisNot affected
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) Operational ToolsredisNot affected
Red Hat Mobile Application Platform 4redisNot affected
Red Hat OpenStack Platform 10 (Newton)redisNot affected
Red Hat OpenStack Platform 11 (Ocata)redisNot affected
Red Hat OpenStack Platform 12 (Pike)redisNot affected
Red Hat OpenStack Platform 8 (Liberty)redisNot affected
Red Hat OpenStack Platform 8 (Liberty) Operational ToolsredisNot affected
Red Hat OpenStack Platform 9 (Mitaka)redisNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-20
https://bugzilla.redhat.com/show_bug.cgi?id=1499152redis: Insufficient input validation in the clusterLoadConfig function

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 8 лет назад

The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging "limited access to the machine."

CVSS3: 9.8
nvd
больше 8 лет назад

The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging "limited access to the machine."

CVSS3: 9.8
debian
больше 8 лет назад

The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows atta ...

CVSS3: 9.8
github
больше 3 лет назад

The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging "limited access to the machine."

CVSS3: 9.8
fstec
больше 8 лет назад

Уязвимость функции clusterLoadConfig (cluster.c) системы управления базами данных Redis, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие

3.3 Low

CVSS3