Lucene search
FreeBSD8706E097-6DB7-11EE-8744-080027F5FEC9HistoryOct 18, 2023 - 12:00 a.m.
redis -- Possible bypassing Unix socket permissions
2023-10-1800:00:00
vuxml.freebsd.org
9
redis
unix socket
permissions
race condition
bypass
3.6 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Redis core team reports:
The wrong order of listen(2) and chmod(2) calls creates a
race condition that can be used by another process to
bypass desired Unix socket permissions on startup.
Related
nessus
nessus
Fedora 39 : redis (2023-fd75e4f307)
2023-11-07 00:00:00
Fedora 37 : redis (2023-8a9087f089)
2023-10-26 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : redis (SUSE-SU-2023:4290-1)
2023-11-01 00:00:00
cvelist
cvelist
osv
osv
BIT-redis-2023-45145
2024-03-06 11:03:25
redis - security update
2023-10-23 00:00:00
BIT-2023-45145
2023-10-31 07:27:24
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:4376-1)
2023-11-07 00:00:00
Mageia: Security Advisory (MGASA-2023-0301)
2023-10-25 00:00:00
alpinelinux
alpinelinux
CVE-2023-45145
2023-10-18 21:15:09
prion
prion
Race condition
2023-10-18 21:15:00
redos
redos
ROS-20231030-06
2023-10-30 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: redis-7.0.14-1.fc38
2023-10-27 01:26:50
[SECURITY] Fedora 39 Update: redis-7.2.2-1.fc39
2023-11-03 19:01:14
[SECURITY] Fedora 37 Update: redis-7.0.14-1.fc37
2023-10-27 01:12:03
veracode
veracode
Race Condition
2023-10-20 05:33:12
ibm
ibm
cve
cve
CVE-2023-45145
2023-10-18 21:15:09
mageia
mageia
Updated redis package fixes a security vulnerability
2023-10-24 20:25:46
cbl_mariner
cbl_mariner
CVE-2023-45145 affecting package redis for versions less than 6.2.14-1
2023-11-08 02:07:28
redhatcve
redhatcve
CVE-2023-45145
2023-10-18 23:57:26
debiancve
debiancve
CVE-2023-45145
2023-10-18 21:15:09
debian
debian
[SECURITY] [DLA 3627-1] redis security update
2023-10-23 13:01:56
[SECURITY] [DSA 5610-1] redis security update
2024-01-29 21:15:54
nvd
nvd
CVE-2023-45145
2023-10-18 21:15:09
ubuntucve
ubuntucve
CVE-2023-45145
2023-10-18 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-5.0-0125
2023-10-25 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0497
2023-10-25 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0673
2023-10-26 00:00:00
ubuntu
ubuntu
Redis vulnerabilities
2023-12-05 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
3.6 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Related for 8706E097-6DB7-11EE-8744-080027F5FEC9