redis vulnerabilities (Mageia)
48 vulnerabilities.
-
redisMageia Updated redis packages fix a security vulnerability 7.5 High -
redisMageia RedisBloom RESTORE invalid memory access may allow remote code execution 7.7 High -
redisMageia RedisTimeSeries RESTORE invalid memory access may allow remote code execution 7.7 High -
redisMageia redis-server RESTORE invalid memory access may allow remote code execution 7.7 High -
redisMageia redis-server Lua use-after-free may allow remote code execution 6.1 Medium -
redisMageia redis-server use-after-free in unblock client flow may allow remote code execution 7.7 High -
redisMageia Redis Lua Use-After-Free may lead to remote code execution 10.0 Critical -
redisMageia Redis is vulnerable to DoS via specially crafted LUA scripts 6.3 Medium -
redisMageia Redis: Authenticated users can execute LUA scripts as a different user 6.0 Medium -
redisMageia Lua library commands may lead to integer overflow and potential RCE 7.0 High -
redisMageia Redis DoS Vulnerability due to bad connection error handling 7.5 High -
redisMageia Redis allows out of bounds writes in hyperloglog commands leading to RCE 7.0 High -
redisMageia redis-check-aof may lead to stack overflow and potential RCE 4.7 Medium -
redisMageia Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client 7.5 High -
redisMageia Redis allows denial-of-service due to malformed ACL selectors 4.4 Medium -
redisMageia Redis' Lua library commands may lead to remote code execution 7.0 High -
redisMageia Lua library commands may lead to stack overflow and RCE in Redis 7.0 High -
redisMageia Denial-of-service due to unbounded pattern matching in Redis 5.5 Medium -
redisMageia Denial-of-service due to malformed ACL selectors in Redis 4.4 Medium -
redisMageia Redis vulnerable to integer overflow in certain payloads 8.1 High -
redisMageia Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window. 3.6 Low -
redisMageia Heap overflow issue with the Lua cjson library used by Redis 7.0 High -
redisMageia `HINCRBYFLOAT` can be used to crash a redis-server process 5.5 Medium -
redisMageia Integer Overflow in several Redis commands can lead to denial of service. 5.5 Medium -
redisMageia Redis string pattern matching can be abused to achieve Denial of Service 5.5 Medium -
redisMageia A Malformed Lua script can crash Redis 3.3 Low -
redisMageia Lua scripts can be manipulated to overcome ACL rules in Redis 3.9 Low -
redisMageia Integer overflow issue with strings in Redis 7.5 High -
redisMageia Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms 7.5 High -
redisMageia Integer overflow issue with intsets in Redis 7.5 High -
redisMageia DoS vulnerability in Redis 7.5 High -
redisMageia Vulnerability in Lua Debugger in Redis 5.3 Medium -
redisMageia Integer overflow issue with Streams in Redis 7.5 High -
redisMageia Vulnerability in handling large ziplists 7.5 High -
redisMageia Lua scripts can overflow the heap-based Lua stack in Redis 7.5 High -
redisMageia Integer overflow issues with *BIT commands on 32-bit systems 7.5 High -
redisMageia Vulnerability in the COPY command for large intsets 7.5 High -
redisMageia Vulnerability in the STRALGO LCS command 7.5 High -
redisMageia Integer overflow on 32-bit systems 5.4 Medium -
redisMageia An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context... 7.7 High -
redisMageia A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions... 7.2 High -
redisMageia A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3... 7.2 High -
redisMageia An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis... 9.8 Critical -
redisMageia Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2... 9.8 Critical -
redisMageia The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of... 9.8 Critical -
redisMageia linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history,... 3.3 Low -
redisMageia Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x... 7.5 High -
redisMageia Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua... 10.0 High