Логотип exploitDog
bind:CVE-2024-46981
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-46981

Количество 16

Количество 16

ubuntu логотип

CVE-2024-46981

10 месяцев назад

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.

CVSS3: 7
EPSS: Средний
redhat логотип

CVE-2024-46981

10 месяцев назад

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.

CVSS3: 7
EPSS: Средний
nvd логотип

CVE-2024-46981

10 месяцев назад

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.

CVSS3: 7
EPSS: Средний
msrc логотип

CVE-2024-46981

10 месяцев назад

Redis' Lua library commands may lead to remote code execution

CVSS3: 7
EPSS: Средний
debian логотип

CVE-2024-46981

10 месяцев назад

Redis is an open source, in-memory database that persists on disk. An ...

CVSS3: 7
EPSS: Средний
suse-cvrf логотип

SUSE-SU-2025:0162-1

10 месяцев назад

Security update for redis

EPSS: Средний
fstec логотип

BDU:2025-00214

10 месяцев назад

Уязвимость системы управления базами данных (СУБД) Redis, связанная с использованием памяти после её освобождения, позволяющая нарушителю выполнить произвольный код

CVSS3: 7
EPSS: Средний
suse-cvrf логотип

SUSE-SU-2025:0163-1

10 месяцев назад

Security update for redis

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0161-1

10 месяцев назад

Security update for redis7

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0160-1

10 месяцев назад

Security update for redis7

EPSS: Низкий
oracle-oval логотип

ELSA-2025-0692

10 месяцев назад

ELSA-2025-0692: redis:7 security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0081-1

10 месяцев назад

Security update for redis

EPSS: Низкий
redos логотип

ROS-20250114-13

10 месяцев назад

Множественные уязвимости redis

CVSS3: 4.4
EPSS: Низкий
rocky логотип

RLSA-2025:0693

8 месяцев назад

Important: redis security update

EPSS: Низкий
oracle-oval логотип

ELSA-2025-0693

10 месяцев назад

ELSA-2025-0693: redis security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-0595

10 месяцев назад

ELSA-2025-0595: redis:6 security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-46981

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.

CVSS3: 7
65%
Средний
10 месяцев назад
redhat логотип
CVE-2024-46981

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.

CVSS3: 7
65%
Средний
10 месяцев назад
nvd логотип
CVE-2024-46981

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.

CVSS3: 7
65%
Средний
10 месяцев назад
msrc логотип
CVE-2024-46981

Redis' Lua library commands may lead to remote code execution

CVSS3: 7
65%
Средний
10 месяцев назад
debian логотип
CVE-2024-46981

Redis is an open source, in-memory database that persists on disk. An ...

CVSS3: 7
65%
Средний
10 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0162-1

Security update for redis

65%
Средний
10 месяцев назад
fstec логотип
BDU:2025-00214

Уязвимость системы управления базами данных (СУБД) Redis, связанная с использованием памяти после её освобождения, позволяющая нарушителю выполнить произвольный код

CVSS3: 7
65%
Средний
10 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0163-1

Security update for redis

10 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0161-1

Security update for redis7

10 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0160-1

Security update for redis7

10 месяцев назад
oracle-oval логотип
ELSA-2025-0692

ELSA-2025-0692: redis:7 security update (IMPORTANT)

10 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0081-1

Security update for redis

10 месяцев назад
redos логотип
ROS-20250114-13

Множественные уязвимости redis

CVSS3: 4.4
10 месяцев назад
rocky логотип
RLSA-2025:0693

Important: redis security update

8 месяцев назад
oracle-oval логотип
ELSA-2025-0693

ELSA-2025-0693: redis security update (IMPORTANT)

10 месяцев назад
oracle-oval логотип
ELSA-2025-0595

ELSA-2025-0595: redis:6 security update (IMPORTANT)

10 месяцев назад

Уязвимостей на страницу