Описание
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 5:8.0.6-3 |
| esm-apps-legacy/xenial | not-affected | vulnerable code not present |
| esm-apps/bionic | not-affected | vulnerable code not present |
| esm-apps/focal | not-affected | vulnerable code not present |
| esm-apps/jammy | not-affected | vulnerable code not present |
| esm-apps/noble | released | 5:7.0.15-1ubuntu0.24.04.5 |
| esm-apps/resolute | released | 5:8.0.5-1ubuntu0.1 |
| esm-infra-legacy/trusty | not-affected | vulnerable code not present |
| jammy | not-affected | vulnerable code not present |
| noble | released | 5:7.0.15-1ubuntu0.24.04.5 |
Показывать по
7.1 High
CVSS3
Связанные уязвимости
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).
A flaw was found in Redis community. The cluster bus packet parser, re ...
7.1 High
CVSS3