Логотип exploitDog
bind:CVE-2024-31449
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-31449

Количество 16

Количество 16

ubuntu логотип

CVE-2024-31449

около 1 года назад

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 7
EPSS: Средний
redhat логотип

CVE-2024-31449

около 1 года назад

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 7
EPSS: Средний
nvd логотип

CVE-2024-31449

около 1 года назад

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 7
EPSS: Средний
msrc логотип

CVE-2024-31449

11 месяцев назад

Lua library commands may lead to stack overflow and RCE in Redis

CVSS3: 7
EPSS: Средний
debian логотип

CVE-2024-31449

около 1 года назад

Redis is an open source, in-memory database that persists on disk. An ...

CVSS3: 7
EPSS: Средний
fstec логотип

BDU:2024-07792

около 1 года назад

Уязвимость системы управления базами данных (СУБД) Redis, связанная с переполнением буфера в стеке, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
EPSS: Средний
suse-cvrf логотип

SUSE-SU-2024:3575-1

около 1 года назад

Security update for redis

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0081-1

10 месяцев назад

Security update for redis

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3549-1

около 1 года назад

Security update for redis7

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3537-1

около 1 года назад

Security update for redis7

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3535-1

около 1 года назад

Security update for redis

EPSS: Низкий
redos логотип

ROS-20241017-05

около 1 года назад

Множественные уязвимости redis

CVSS3: 8.8
EPSS: Низкий
rocky логотип

RLSA-2025:0693

8 месяцев назад

Important: redis security update

EPSS: Низкий
oracle-oval логотип

ELSA-2025-0693

10 месяцев назад

ELSA-2025-0693: redis security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-10869

11 месяцев назад

ELSA-2024-10869: redis:7 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-0595

10 месяцев назад

ELSA-2025-0595: redis:6 security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-31449

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 7
36%
Средний
около 1 года назад
redhat логотип
CVE-2024-31449

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 7
36%
Средний
около 1 года назад
nvd логотип
CVE-2024-31449

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS3: 7
36%
Средний
около 1 года назад
msrc логотип
CVE-2024-31449

Lua library commands may lead to stack overflow and RCE in Redis

CVSS3: 7
36%
Средний
11 месяцев назад
debian логотип
CVE-2024-31449

Redis is an open source, in-memory database that persists on disk. An ...

CVSS3: 7
36%
Средний
около 1 года назад
fstec логотип
BDU:2024-07792

Уязвимость системы управления базами данных (СУБД) Redis, связанная с переполнением буфера в стеке, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.8
36%
Средний
около 1 года назад
suse-cvrf логотип
SUSE-SU-2024:3575-1

Security update for redis

около 1 года назад
suse-cvrf логотип
SUSE-SU-2025:0081-1

Security update for redis

10 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:3549-1

Security update for redis7

около 1 года назад
suse-cvrf логотип
SUSE-SU-2024:3537-1

Security update for redis7

около 1 года назад
suse-cvrf логотип
SUSE-SU-2024:3535-1

Security update for redis

около 1 года назад
redos логотип
ROS-20241017-05

Множественные уязвимости redis

CVSS3: 8.8
около 1 года назад
rocky логотип
RLSA-2025:0693

Important: redis security update

8 месяцев назад
oracle-oval логотип
ELSA-2025-0693

ELSA-2025-0693: redis security update (IMPORTANT)

10 месяцев назад
oracle-oval логотип
ELSA-2024-10869

ELSA-2024-10869: redis:7 security update (MODERATE)

11 месяцев назад
oracle-oval логотип
ELSA-2025-0595

ELSA-2025-0595: redis:6 security update (IMPORTANT)

10 месяцев назад

Уязвимостей на страницу