Количество 22
Количество 22
GHSA-whxg-wx83-85p5
Lua library commands may lead to stack overflow and potential RCE
CVE-2024-31449
Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2024-31449
Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2024-31449
Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2024-31449
Lua library commands may lead to stack overflow and RCE in Redis
CVE-2024-31449
Redis is an open source, in-memory database that persists on disk. An ...
BDU:2024-07792
Уязвимость системы управления базами данных (СУБД) Redis, связанная с переполнением буфера в стеке, позволяющая нарушителю выполнить произвольный код
SUSE-SU-2024:3575-1
Security update for redis
SUSE-SU-2025:0081-1
Security update for redis
SUSE-SU-2024:3549-1
Security update for redis7
SUSE-SU-2024:3537-1
Security update for redis7
SUSE-SU-2024:3535-1
Security update for redis
ALT-PU-2024-16947
ALT-PU-2024-16947: package `redis` update to version 6.2.16-alt1
ROS-20241017-05
Множественные уязвимости redis
RLSA-2025:0693
Important: redis security update
ELSA-2025-0693
ELSA-2025-0693: redis security update (IMPORTANT)
ELSA-2024-10869
ELSA-2024-10869: redis:7 security update (MODERATE)
ALT-PU-2024-16804
ALT-PU-2024-16804: package `redis` update to version 7.2.6-alt1
RLSA-2025:0595
Important: redis:6 security update
ELSA-2025-0595
ELSA-2025-0595: redis:6 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-whxg-wx83-85p5 Lua library commands may lead to stack overflow and potential RCE | CVSS3: 7 | 4% Низкий | около 2 лет назад |
 | CVE-2024-31449 Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. | CVSS3: 8.8 | 4% Низкий | около 2 лет назад |
 | CVE-2024-31449 Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. | CVSS3: 7 | 4% Низкий | около 2 лет назад |
 | CVE-2024-31449 Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. | CVSS3: 8.8 | 4% Низкий | около 2 лет назад |
 | CVE-2024-31449 Lua library commands may lead to stack overflow and RCE in Redis | CVSS3: 7 | 4% Низкий | почти 2 года назад |
| CVE-2024-31449 Redis is an open source, in-memory database that persists on disk. An ... | CVSS3: 8.8 | 4% Низкий | около 2 лет назад |
 | BDU:2024-07792 Уязвимость системы управления базами данных (СУБД) Redis, связанная с переполнением буфера в стеке, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 4% Низкий | около 2 лет назад |
 | SUSE-SU-2024:3575-1 Security update for redis | около 2 лет назад | ||
| SUSE-SU-2025:0081-1 Security update for redis | почти 2 года назад | ||
| SUSE-SU-2024:3549-1 Security update for redis7 | около 2 лет назад | ||
| SUSE-SU-2024:3537-1 Security update for redis7 | около 2 лет назад | ||
| SUSE-SU-2024:3535-1 Security update for redis | около 2 лет назад | ||
| ALT-PU-2024-16947 ALT-PU-2024-16947: package `redis` update to version 6.2.16-alt1 | CVSS3: 8.8 | почти 2 года назад | |
 | ROS-20241017-05 Множественные уязвимости redis | CVSS3: 8.8 | около 2 лет назад | |
 | RLSA-2025:0693 Important: redis security update | больше 1 года назад | ||
| ELSA-2025-0693 ELSA-2025-0693: redis security update (IMPORTANT) | почти 2 года назад | ||
| ELSA-2024-10869 ELSA-2024-10869: redis:7 security update (MODERATE) | почти 2 года назад | ||
| ALT-PU-2024-16804 ALT-PU-2024-16804: package `redis` update to version 7.2.6-alt1 | CVSS3: 8.8 | почти 2 года назад | |
| RLSA-2025:0595 Important: redis:6 security update | больше 1 года назад | ||
| ELSA-2025-0595 ELSA-2025-0595: redis:6 security update (IMPORTANT) | почти 2 года назад |
Уязвимостей на страницу