Lucene search
FreeBSD8AA6340D-E7C6-41E0-B2A3-3C9E9930312AHistoryMar 26, 2023 - 12:00 a.m.
py39-redis -- can send response data to the client of an unrelated request
2023-03-2600:00:00
vuxml.freebsd.org
5
0.001 Low
EPSS
Percentile
41.7%
drago-balto reports:
redis-py through 4.5.3 and 4.4.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an unrelated request.
NOTE: this issue exists because of an incomplete fix for CVE-2023-28858.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | py39-redis | =Â 4.4.0 | UNKNOWN |
| FreeBSD | any | noarch | py39-redis | <Â 4.4.4 | UNKNOWN |
Related
osv
osv
CVE-2023-28858
2023-03-26 19:15:06
redis-py Race Condition due to incomplete fix
2023-03-26 21:30:23
redis-py Race Condition vulnerability
2023-03-26 21:30:23
cve
cve
CVE-2023-28858
2023-03-26 19:15:06
CVE-2023-28859
2023-03-26 19:15:06
debiancve
debiancve
CVE-2023-28858
2023-03-26 19:15:06
CVE-2023-28859
2023-03-26 19:15:06
veracode
veracode
Race Condition
2023-03-28 02:50:08
Race Condition
2023-03-28 02:25:55
github
github
redis-py Race Condition vulnerability
2023-03-26 21:30:23
redis-py Race Condition due to incomplete fix
2023-03-26 21:30:23
prion
prion
Design/Logic Flaw
2023-03-26 19:15:00
Cross site request forgery (csrf)
2023-03-26 19:15:00
freebsd
freebsd
py39-redis -- can send response data to the client of an unrelated request
2023-03-26 00:00:00
alpinelinux
alpinelinux
CVE-2023-28858
2023-03-26 19:15:06
CVE-2023-28859
2023-03-26 19:15:06
nessus
nessus
redos
redos
ROS-20230620-07
2023-06-20 00:00:00
cvelist
cvelist
CVE-2023-28858
2023-03-26 00:00:00
CVE-2023-28859
2023-03-26 00:00:00
ubuntucve
ubuntucve
CVE-2023-28858
2023-03-26 00:00:00
CVE-2023-28859
2023-03-26 00:00:00
githubexploit
githubexploit
Exploit for Off-by-one Error in Redis Redis-Py
2023-03-26 22:03:57
redhatcve
redhatcve
CVE-2023-28858
2023-03-27 12:43:38
CVE-2023-28859
2023-03-27 12:43:36
ibm
ibm
Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities
2023-06-16 15:19:39
Security Bulletin: IBM Cloud Pak for Network Automation 2.4.7 fixes multiple security vulnerabilities
2023-06-20 08:47:47
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-04-26 15:33:20