DeutschShown in its original language — a full translation is planned for a future version.
Redis: Schwachstelle ermöglicht Codeausführung
view advisory published 2021-07-11
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Redis ausnutzen, um beliebigen Programmcode auszuführen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-32625US | high8.8 | — | ||
Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer, could… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Customer Portal vom 2021-07-11external
- Amazon Linux Security Advisory ALASREDIS6-2023-008 vom 2023-09-27external
- Red Hat Bugzilla - Bug 1980790 vom 2021-07-11external
- SUSE Security Update SUSE-SU-2021:2294-1 vom 2021-07-12external
- WID-SEC-W-2023-2458 - CSAF Versionself
- WID-SEC-2023-2458 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan