Количество 10
Количество 10
GHSA-4cfx-h9gq-xpx3
Heap overflow in COMMAND GETKEYS and ACL evaluation
CVE-2023-36824
Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.
CVE-2023-36824
Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.
CVE-2023-36824
Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.
CVE-2023-36824
Redis is an in-memory database that persists on disk. In Redit 7.0 pri ...
BDU:2023-04264
Уязвимость системы управления базами данных (СУБД) Redis, cвязанная с переполнением буфера, позволяющая нарушителю выполнить произвольный код
ROS-20230825-04
Уязвимость Redis
SUSE-SU-2023:2925-1
Security update for redis7
ALT-PU-2023-4982
ALT-PU-2023-4982: package `redis` update to version 7.0.12-alt1
ALT-PU-2025-13204
ALT-PU-2025-13204: package `redis` update to version 7.2.11-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-4cfx-h9gq-xpx3 Heap overflow in COMMAND GETKEYS and ACL evaluation | CVSS3: 7.4 | 77% Высокий | больше 3 лет назад |
 | CVE-2023-36824 Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12. | CVSS3: 8.8 | 77% Высокий | больше 3 лет назад |
 | CVE-2023-36824 Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12. | CVSS3: 8.8 | 77% Высокий | больше 3 лет назад |
 | CVE-2023-36824 Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12. | CVSS3: 8.8 | 77% Высокий | больше 3 лет назад |
| CVE-2023-36824 Redis is an in-memory database that persists on disk. In Redit 7.0 pri ... | CVSS3: 8.8 | 77% Высокий | больше 3 лет назад |
 | BDU:2023-04264 Уязвимость системы управления базами данных (СУБД) Redis, cвязанная с переполнением буфера, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 77% Высокий | больше 3 лет назад |
 | ROS-20230825-04 Уязвимость Redis | CVSS3: 8.8 | 77% Высокий | около 3 лет назад |
 | SUSE-SU-2023:2925-1 Security update for redis7 | больше 3 лет назад | ||
| ALT-PU-2023-4982 ALT-PU-2023-4982: package `redis` update to version 7.0.12-alt1 | CVSS3: 9.8 | около 3 лет назад | |
| ALT-PU-2025-13204 ALT-PU-2025-13204: package `redis` update to version 7.2.11-alt1 | CVSS3: 9.9 | около 1 года назад |
Уязвимостей на страницу