RSS   Podatności dla 'Redis'   RSS

2017-10-06
 
CVE-2017-15047

CWE-119
 
 
The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have unspecified other impact by leveraging "limited access to the machine."

 
2016-10-28
 
CVE-2016-8339

CWE-119
 
 
A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG SET command can lead to an out of bounds write potentially resulting in code execution.

 
2016-08-10
 
CVE-2013-7458

CWE-200
 
 
linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.

 
2016-04-13
 
CVE-2015-8080

CWE-189
 
 
Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.

 
2015-06-09
 
CVE-2015-4335

CWE-17
 
 
Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.

 

 >>> Vendor: Pivotal software 54 Produkty
Mysql
Operations manager
Spring framework
Rabbitmq management
Rabbitmq
Redis
Cloud foundry elastic runtime
Cloud foundry
Cloud foundry ops manager
Cloud foundry uaa
Cloud foundry uaa bosh
Spring data jpa
Cloud foundry cf mysql
Greenplum
Gemfire for pivotal cloud foundry
Spring security
Cf-release
Cloud foundry elastic runtime cf release
Cloud foundry uaa release
Login-server
Cloud foundry cf release
Cloud foundry garden linux
Spring security oauth
Cloud foundry cf
Spring batch admin
Spring social
Uaa-release
Single sign-on for pivotal cloud foundry
Grootfs
Spring advanced message queuing protocol
Cf-deployment
Spring-ldap
Credhub-release
Spring data rest
Cloud foundry uaa-release
Spring boot
Spring data commons
Spring cloud sso connector
Windows stemcells
Spring integration zip
Pivotal application service
Cloud foundry cf-deployment
Cloudfoundry uaa release
Cloudfoundry uaa
Spring batch
Spring integration
Spring web services
Concourse
Cloud foundry cf-release
Application service
Pivotal container service
Bosh cli
Credhub service broker
Spring data java persistance api

Copyright 2024, cxsecurity.com

 

Back to Top