Поиск уязвимостей
Количество 32
Количество 32
CVE-2022-24736
Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0 and 6.2.7. An additional workaround to mitigate this problem without patching the redis-server executable, if Lua scripting is not being used, is to block access to `SCRIPT LOAD` and `EVAL` commands using ACL rules.
CVE-2022-24736
Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0 and 6.2.7. An additional workaround to mitigate this problem without patching the redis-server executable, if Lua scripting is not being used, is to block access to `SCRIPT LOAD` and `EVAL` commands using ACL rules.
CVE-2022-24736
Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0 and 6.2.7. An additional workaround to mitigate this problem without patching the redis-server executable, if Lua scripting is not being used, is to block access to `SCRIPT LOAD` and `EVAL` commands using ACL rules.
CVE-2022-24736
CVE-2022-24736
Redis is an in-memory database that persists on disk. Prior to version ...
SUSE-SU-2022:4169-1
Security update for redis
SUSE-SU-2022:4168-1
Security update for redis
GHSA-8vvp-2mv7-px5c
A vulnerability, which was classified as problematic, was found in Redis. Affected is the function sigsegvHandler of the file debug.c of the component Crash Report. The manipulation leads to denial of service. The name of the patch is 0bf90d944313919eb8e63d3588bf63a367f020a3. It is recommended to apply a patch to fix this issue. VDB-211962 is the identifier assigned to this vulnerability.
BDU:2022-06489
Уязвимость компонента Crash Report функции sigsegvHandler файла debug.c системы управления базами данных Redis, позволяющая нарушителю вызвать отказ в обслуживании
GHSA-3qpw-7686-5984
A Malformed Lua script can crash Redis
BDU:2022-02940
Уязвимость системы управления базами данных Redis, связанная с ошибками разыменования указателей, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20221025-02
Уязвимость Redis
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-24736 Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0 and 6.2.7. An additional workaround to mitigate this problem without patching the redis-server executable, if Lua scripting is not being used, is to block access to `SCRIPT LOAD` and `EVAL` commands using ACL rules. | CVSS3: 5.5 | 1% Низкий | больше 4 лет назад |
 | CVE-2022-24736 Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0 and 6.2.7. An additional workaround to mitigate this problem without patching the redis-server executable, if Lua scripting is not being used, is to block access to `SCRIPT LOAD` and `EVAL` commands using ACL rules. | CVSS3: 3.3 | 1% Низкий | больше 4 лет назад |
 | CVE-2022-24736 Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0 and 6.2.7. An additional workaround to mitigate this problem without patching the redis-server executable, if Lua scripting is not being used, is to block access to `SCRIPT LOAD` and `EVAL` commands using ACL rules. | CVSS3: 5.5 | 1% Низкий | больше 4 лет назад |
 | CVSS3: 5.5 | 1% Низкий | больше 4 лет назад | |
| CVE-2022-24736 Redis is an in-memory database that persists on disk. Prior to version ... | CVSS3: 5.5 | 1% Низкий | больше 4 лет назад |
 | SUSE-SU-2022:4169-1 Security update for redis | 1% Низкий | почти 4 года назад | |
| SUSE-SU-2022:4168-1 Security update for redis | 1% Низкий | почти 4 года назад | |
| GHSA-8vvp-2mv7-px5c A vulnerability, which was classified as problematic, was found in Redis. Affected is the function sigsegvHandler of the file debug.c of the component Crash Report. The manipulation leads to denial of service. The name of the patch is 0bf90d944313919eb8e63d3588bf63a367f020a3. It is recommended to apply a patch to fix this issue. VDB-211962 is the identifier assigned to this vulnerability. | CVSS3: 7.5 | 1% Низкий | около 4 лет назад |
 | BDU:2022-06489 Уязвимость компонента Crash Report функции sigsegvHandler файла debug.c системы управления базами данных Redis, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | около 4 лет назад |
| GHSA-3qpw-7686-5984 A Malformed Lua script can crash Redis | CVSS3: 3.3 | 1% Низкий | больше 4 лет назад |
| BDU:2022-02940 Уязвимость системы управления базами данных Redis, связанная с ошибками разыменования указателей, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 3.3 | 1% Низкий | больше 4 лет назад |
 | ROS-20221025-02 Уязвимость Redis | CVSS3: 7.5 | 1% Низкий | около 4 лет назад |
Уязвимостей на страницу