Описание
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 5:8.0.6-3 |
| esm-apps-legacy/xenial | not-affected | vulnerable code not present |
| esm-apps/bionic | not-affected | vulnerable code not present |
| esm-apps/focal | not-affected | vulnerable code not present |
| esm-apps/jammy | released | 5:6.0.16-1ubuntu1.2 |
| esm-apps/noble | released | 5:7.0.15-1ubuntu0.24.04.5 |
| esm-apps/resolute | released | 5:8.0.5-1ubuntu0.1 |
| esm-infra-legacy/trusty | not-affected | vulnerable code not present |
| jammy | released | 5:6.0.16-1ubuntu1.2 |
| noble | released | 5:7.0.15-1ubuntu0.24.04.5 |
Показывать по
Ссылки на источники
EPSS
7.1 High
CVSS3
Связанные уязвимости
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.
Redis contains a use-after-free vulnerability in the 'tlsProcessPendin ...
EPSS
7.1 High
CVSS3