Описание
Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command). NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this.
A flaw was found in the Redis package. If a replica sends a SET command to its master during a failover, the master crashes on assertion.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat 3scale API Management Platform 2 | 3scale-amp2/backend-rhel8 | Affected | ||
| Red Hat 3scale API Management Platform 2 | 3scale-amp2/system-rhel7 | Will not fix | ||
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/search-api-rhel8 | Not affected | ||
| Red Hat Ansible Automation Platform 1.2 | ansible-tower | Will not fix | ||
| Red Hat Enterprise Linux 8 | redis:6/redis | Will not fix | ||
| Red Hat Enterprise Linux 9 | redis | Not affected | ||
| Red Hat Fuse 7 | redis | Will not fix | ||
| Red Hat OpenStack Platform 16.1 | openstack-redis-base-container | Not affected | ||
| Red Hat OpenStack Platform 16.1 | openstack-redis-container | Will not fix | ||
| Red Hat OpenStack Platform 17.0 | openstack-redis-container | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
5.9 Medium
CVSS3
Связанные уязвимости
Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command). NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this.
Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command). NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this.
Redis before 6cbea7d allows a replica to cause an assertion failure in ...
Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command). NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this.
ALT-PU-2021-2072: package `redis` update to version 6.2.4-alt1
EPSS
5.9 Medium
CVSS3