Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.146847
Kategorie:Databases
Titel:Redis Stack Overflow Vulnerability (GHSA-p486-xggp-782c)
Zusammenfassung:Redis is prone to a heap-based stack overflow vulnerability.
Beschreibung:Summary:
Redis is prone to a heap-based stack overflow vulnerability.

Vulnerability Insight:
Specially crafted Lua scripts executing in Redis can cause the
heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can
result with heap corruption and potentially remote code execution.

Affected Software/OS:
Redis version 2.6 and later.

Solution:
Update to version 5.0.14, 6.0.16, 6.2.6 or later.

CVSS Score:
6.5

CVSS Vector:
AV:N/AC:L/Au:S/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2021-32626
https://github.com/redis/redis/security/advisories/GHSA-p486-xggp-782c
https://security.netapp.com/advisory/ntap-20211104-0003/
Debian Security Information: DSA-5001 (Google Search)
https://www.debian.org/security/2021/dsa-5001
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HTYQ5ZF37HNGTZWVNJD3VXP7I6MEEF42/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VL5KXFN3ATM7IIM7Q4O4PWTSRGZ5744Z/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WR5WKJWXD4D6S3DJCZ56V74ESLTDQRAB/
https://security.gentoo.org/glsa/202209-17
https://github.com/redis/redis/commit/666ed7facf4524bf6d19b11b20faa2cf93fdf591
https://www.oracle.com/security-alerts/cpuapr2022.html
https://lists.apache.org/thread.html/r75490c61c2cb7b6ae2c81238fd52ae13636c60435abcd732d41531a0@%3Ccommits.druid.apache.org%3E
CopyrightCopyright (C) 2021 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.