DeutschShown in its original language — a full translation is planned for a future version.
Redis: Mehrere Schwachstellen
view advisory published 2021-10-04
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Redis ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-41099US | high7.5 | — | ||
Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string library can be used to corrupt the heap and potentially result w… | ||||
| CVE-2021-32762US | high8.8 | — | ||
Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer overflow when parsing spe… | ||||
| CVE-2021-32687US | high7.5 | — | ||
Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can be exploited to corrupt the heap and potentially be u… | ||||
| CVE-2021-32675US | high7.5 | Exploit | ||
Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RESP) request, Redis allocates memory according to user-specifi… | ||||
| CVE-2021-32672US | medium4.3 | — | ||
Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to… | ||||
| CVE-2021-32628US | high7.5 | — | ||
Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be exploited to corrupt t… | ||||
| CVE-2021-32627US | high7.5 | — | ||
Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt the heap and potentially result… | ||||
| CVE-2021-32626US | high8.8 | — | ||
Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be ov… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2021-3918 vom 2021-10-20external
- Red Hat Security Advisory RHSA-2021:3873 vom 2021-10-15external
- Red Hat Security Advisory RHSA-2021:3918 vom 2021-10-19external
- Red Hat Security Advisory RHSA-2021:3925 vom 2021-10-20external
- Red Hat Security Advisory RHSA-2021:3944 vom 2021-10-20external
- Red Hat Security Advisory RHSA-2021:3945 vom 2021-10-20external
- Red Hat Security Advisory RHSA-2021:3946 vom 2021-10-20external
- Red Hat Security Advisory RHSA-2021:3947 vom 2021-10-20external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan