CVE-2021-29469

Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings. This issue could lead to a denial of service. The issue is patched in version 3.1.1...

UBUNTU-CVE-2021-29469

Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings. This issue could lead to a denial of service. The issue is patched in version 3.1.1...

Code injection

Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings. This issue could lead to a denial of service. The issue is patched in version 3.1.1...

CVE-2021-29469

Node-redis (Node.js Redis client) is vulnerable prior to version 3.1.1 due to a regex used to detect monitor messages that can backtrack exponentially, potentially causing a denial of service when a client is in monitoring mode. The issue is fixed in version 3.1.1. Affected context includes IBM a...

CVE-2021-29469 Potential exponential regex in monitor mode

Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings. This issue could lead to a denial of service. The issue is patched in version 3.1.1...

CVE-2021-29469

Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings. This issue could lead to a denial of service. The issue is patched in version 3.1.1...

PT-2021-18237 · Unknown · Node-Redis

Name of the Vulnerable Software and Affected Versions: Node-redis versions prior to 3.1.1 Description: The issue is related to the regex used to detect monitor messages when a client is in monitoring mode, which could cause exponential backtracking on some strings, leading to a denial of service...

node-redis 安全漏洞

node-redis is a software application. A high-performance Node.js Redis client. A security vulnerability exists in node-redis, which stems from the fact that when the client is in monitor mode, the start of a regex used to detect monitor messages may result in exponential backtracking of certain...

The vulnerability of the memtest_preserving_test function in the memtest.c component of the Redis database management system allows a attacker to cause a service failure or execute arbitrary code by causing an operation to go beyond the buffer boundaries during the creation of an emergency dump.

The vulnerability of the memtestpreservingtest function in the memtest.c component of the Redis database management system is related to the issue where an operation is executed outside the buffer in memory when creating an emergency dump. Exploiting this vulnerability can allow a malicious actor...

Denial Of Service (DoS)

redis is vulnerable to denial of service. A heap overflow was found in when using a heap allocator other than jemalloc or glibc's malloc allows an attacker to crash the application...

rubygem-activesupport: potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore

A flaw was found in rubygem-activesupport. An untrusted user input can be written to the cache store using the raw: true parameter which can lead to the result being evaluated as a marshaled object instead of plain text. The threat from this vulnerability is to data confidentiality and integrity ...

Photon OS 3.0: Redis PHSA-2021-3.0-0220

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0220. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148813...

Photon OS 1.0: Redis PHSA-2021-1.0-0380

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0380. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148809...

Photon OS 2.0: Redis PHSA-2021-2.0-0336

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0336. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148824...

Moderate Photon OS Security Update - PHSA-2021-3.0-0220

Updates of 'redis' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2021-0220

Updates of 'redis' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0336

An update of 'redis' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2021-0008

Updates of 'subversion', 'openvswitch', 'openldap', 'glibc', 'redis', 'ruby' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0380

An update of 'redis' packages of Photon OS has been released...

Redis Heap Overflow Vulnerability (Oct 2020)

Redis is prone to a heap overflow vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if description...