redis7 vulnerabilities (SUSE)
24 vulnerabilities.
-
redis7SUSE Redis TLS pending-data list use-after-free 7.5 High -
redis7SUSE Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,... 7.5 High -
redis7SUSE Redis: redis: out-of-bounds read via crafted cluster bus packets 7.1 High -
redis7SUSE Redis Lua Use-After-Free may lead to remote code execution 10.0 Critical -
redis7SUSE Redis is vulnerable to DoS via specially crafted LUA scripts 6.3 Medium -
redis7SUSE Redis: Authenticated users can execute LUA scripts as a different user 6.0 Medium -
redis7SUSE Lua library commands may lead to integer overflow and potential RCE 7.0 High -
redis7SUSE Redis DoS Vulnerability due to bad connection error handling 7.5 High -
redis7SUSE Redis allows out of bounds writes in hyperloglog commands leading to RCE 7.0 High -
redis7SUSE redis-check-aof may lead to stack overflow and potential RCE 4.7 Medium -
redis7SUSE Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client 7.5 High -
redis7SUSE Redis allows denial-of-service due to malformed ACL selectors 4.4 Medium -
redis7SUSE Redis' Lua library commands may lead to remote code execution 7.0 High -
redis7SUSE Lua library commands may lead to stack overflow and RCE in Redis 7.0 High -
redis7SUSE Denial-of-service due to unbounded pattern matching in Redis 5.5 Medium -
redis7SUSE Denial-of-service due to malformed ACL selectors in Redis 4.4 Medium -
redis7SUSE Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window. 3.6 Low -
redis7SUSE Redis SORT_RO may bypass ACL configuration 3.3 Low -
redis7SUSE Heap overflow issue with the Lua cjson library used by Redis 7.0 High -
redis7SUSE Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis 7.4 High -
redis7SUSE `HINCRBYFLOAT` can be used to crash a redis-server process 5.5 Medium -
redis7SUSE Specially crafted MSETNX command can lead to denial-of-service 5.5 Medium -
redis7SUSE Integer Overflow in several Redis commands can lead to denial of service. 5.5 Medium -
redis7SUSE Redis string pattern matching can be abused to achieve Denial of Service 5.5 Medium