Количество 21
Количество 21
GHSA-66gq-c942-6976
Denial-of-service due to unbounded pattern matching
CVE-2024-31228
Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`, `PSUBSCRIBE`, `FUNCTION LIST`, `COMMAND LIST` and ACL definitions. Matching of extremely long patterns may result in unbounded recursion, leading to stack overflow and process crash. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2024-31228
Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`, `PSUBSCRIBE`, `FUNCTION LIST`, `COMMAND LIST` and ACL definitions. Matching of extremely long patterns may result in unbounded recursion, leading to stack overflow and process crash. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2024-31228
Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`, `PSUBSCRIBE`, `FUNCTION LIST`, `COMMAND LIST` and ACL definitions. Matching of extremely long patterns may result in unbounded recursion, leading to stack overflow and process crash. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2024-31228
Denial-of-service due to unbounded pattern matching in Redis
CVE-2024-31228
Redis is an open source, in-memory database that persists on disk. Aut ...
SUSE-SU-2024:3575-1
Security update for redis
SUSE-SU-2025:0081-1
Security update for redis
SUSE-SU-2024:3549-1
Security update for redis7
SUSE-SU-2024:3537-1
Security update for redis7
SUSE-SU-2024:3535-1
Security update for redis
ALT-PU-2024-16947
ALT-PU-2024-16947: package `redis` update to version 6.2.16-alt1
ROS-20241017-05
Множественные уязвимости redis
RLSA-2025:0693
Important: redis security update
ELSA-2025-0693
ELSA-2025-0693: redis security update (IMPORTANT)
ELSA-2024-10869
ELSA-2024-10869: redis:7 security update (MODERATE)
ALT-PU-2024-16804
ALT-PU-2024-16804: package `redis` update to version 7.2.6-alt1
RLSA-2025:0595
Important: redis:6 security update
ELSA-2025-0595
ELSA-2025-0595: redis:6 security update (IMPORTANT)
ALT-PU-2023-4982
ALT-PU-2023-4982: package `redis` update to version 7.0.12-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-66gq-c942-6976 Denial-of-service due to unbounded pattern matching | CVSS3: 5.5 | 1% Низкий | около 2 лет назад |
 | CVE-2024-31228 Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`, `PSUBSCRIBE`, `FUNCTION LIST`, `COMMAND LIST` and ACL definitions. Matching of extremely long patterns may result in unbounded recursion, leading to stack overflow and process crash. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. | CVSS3: 6.5 | 1% Низкий | около 2 лет назад |
 | CVE-2024-31228 Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`, `PSUBSCRIBE`, `FUNCTION LIST`, `COMMAND LIST` and ACL definitions. Matching of extremely long patterns may result in unbounded recursion, leading to stack overflow and process crash. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. | CVSS3: 5.5 | 1% Низкий | около 2 лет назад |
 | CVE-2024-31228 Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`, `PSUBSCRIBE`, `FUNCTION LIST`, `COMMAND LIST` and ACL definitions. Matching of extremely long patterns may result in unbounded recursion, leading to stack overflow and process crash. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. | CVSS3: 6.5 | 1% Низкий | около 2 лет назад |
 | CVE-2024-31228 Denial-of-service due to unbounded pattern matching in Redis | CVSS3: 5.5 | 1% Низкий | почти 2 года назад |
| CVE-2024-31228 Redis is an open source, in-memory database that persists on disk. Aut ... | CVSS3: 6.5 | 1% Низкий | около 2 лет назад |
 | SUSE-SU-2024:3575-1 Security update for redis | около 2 лет назад | ||
| SUSE-SU-2025:0081-1 Security update for redis | почти 2 года назад | ||
| SUSE-SU-2024:3549-1 Security update for redis7 | около 2 лет назад | ||
| SUSE-SU-2024:3537-1 Security update for redis7 | около 2 лет назад | ||
| SUSE-SU-2024:3535-1 Security update for redis | около 2 лет назад | ||
| ALT-PU-2024-16947 ALT-PU-2024-16947: package `redis` update to version 6.2.16-alt1 | CVSS3: 8.8 | почти 2 года назад | |
 | ROS-20241017-05 Множественные уязвимости redis | CVSS3: 8.8 | около 2 лет назад | |
 | RLSA-2025:0693 Important: redis security update | больше 1 года назад | ||
| ELSA-2025-0693 ELSA-2025-0693: redis security update (IMPORTANT) | почти 2 года назад | ||
| ELSA-2024-10869 ELSA-2024-10869: redis:7 security update (MODERATE) | почти 2 года назад | ||
| ALT-PU-2024-16804 ALT-PU-2024-16804: package `redis` update to version 7.2.6-alt1 | CVSS3: 8.8 | почти 2 года назад | |
| RLSA-2025:0595 Important: redis:6 security update | больше 1 года назад | ||
| ELSA-2025-0595 ELSA-2025-0595: redis:6 security update (IMPORTANT) | почти 2 года назад | ||
| ALT-PU-2023-4982 ALT-PU-2023-4982: package `redis` update to version 7.0.12-alt1 | CVSS3: 9.8 | около 3 лет назад |
Уязвимостей на страницу