Redis Labs Redis 安全漏洞

Redis Labs Redis is an open source, web-enabled, memory-based, persistent logging, key-value Key-Value storage database written in ANSI C, with a multi-language API, from Redis Labs. A security vulnerability exists in Redis, which stems from the discovery that Redis v7.0 contains a memory leak vi...

Security Bulletin: A Vulnerability in Redis Node.js module affecting Watson Knowledge Catalog for IBM Cloud Pak for Data (CVE-2021-29469)

Summary Redis Node.js module is vulnerable to a DOS that is impacting Watson Knowledge Catalog for IBM Cloud Pak for Data. This vulnerability has been addressed. Vulnerability Details CVEID: CVE-2021-29469 DESCRIPTION: Node Redis redis module for Node.js is vulnerable to a denial of service, caus...

CVE-2022-33105

Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID...

CVE-2022-33105

Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID...

CVE-2022-33105

Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID...

CVE-2022-33105

CVE-2022-33105 affects Redis v7.0 where a memory leak is triggered by the streamGetEdgeID component. The issue is fixed in Redis 7.0.5 and newer; upgrading to a patched release (≥7.0.5) is recommended. The CVSS metrics in the public entry indicate a network-accessible issue with high impact on av...

Security Bulletin: Mutiple Vulnerabilities in Redis affecting Watson Knowledge Catalog for IBM Cloud Pak for Data

Summary Redis is vulnerable to various overflow vulnerabilities that are impacting Watson Knowledge Catalog for IBM Cloud Pak for Data. These vulnerabilities have been addressed. Vulnerability Details CVEID: CVE-2021-32687 DESCRIPTION: Redis could allow a remote authenticated attacker to execute...

PT-2022-3071

Name of the Vulnerable Software and Affected Versions: Redis version 7.0 Description: The issue is related to a memory leak via the streamGetEdgeID component. It is associated with insufficient input validation in the Redis database management system. Exploitation of this issue may allow an...

Malicious code in sharded-redis-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d865c1c6b738fef08ee9e527bb7d993b8641f48eecfa5a0f06e4ba946a89a2a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6076 Malicious code in sharded-redis-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d865c1c6b738fef08ee9e527bb7d993b8641f48eecfa5a0f06e4ba946a89a2a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1535 Malicious code in bfx-facs-redis-lock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b3c26214473ece8ebc3a44ab6efcdf3749d2436c66f2580d59f98a4ba9b8d23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bfx-facs-redis-lock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b3c26214473ece8ebc3a44ab6efcdf3749d2436c66f2580d59f98a4ba9b8d23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1534 Malicious code in bfx-facs-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7417aae218cce44390d6468cd5da7707683aa20dce949d7069ec22aad1b97d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bfx-facs-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7417aae218cce44390d6468cd5da7707683aa20dce949d7069ec22aad1b97d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-redisenterprisecache-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4a83adabd3ccf9130b2784b86fbcf8b0308089d96a63fc7d2bfd94a60d95a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-redisenterprisecache-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287105dec0a9d6e2b4c952bb5b18669bf2d09a8c934a035360e2f7bba7262936 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1277 Malicious code in azure-arm-redisenterprisecache-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287105dec0a9d6e2b4c952bb5b18669bf2d09a8c934a035360e2f7bba7262936 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE SLES15 Security Update : redis (SUSE-SU-2022:1929-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1929-1 advisory. - Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attack...

SUSE: Security Advisory (SUSE-SU-2022:1929-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for redis (SUSE-SU-2022:1929-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...