CVE-2021-3470

A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use...

CVE-2021-3470

A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use...

Redis: Remote code execution

Background Redis is an open source BSD licensed, in-memory data structure store, used as a database, cache and message broker. Description It was discovered that there were a number of integer overflow issues in Redis. Impact A remote attacker, able to connect to a Redis instance, could send a...

Redis Labs Redis 多款产品缓冲区错误漏洞

Redis Labs Redis is the United States Redis Labs, Inc. of a set of open-source use of ANSI C written to support the network , can be based on the memory can also be a persistent log-type , key-value Key-Value storage database , and provides a variety of languages API. A buffer overflow...

PT-2021-7834 · Redis +2 · Redis +2

Name of the Vulnerable Software and Affected Versions: Redis versions prior to 5.0.10 Redis versions prior to 6.0.9 Redis versions prior to 6.2.0 Description: A heap overflow issue was found in Redis when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of...

Updated redis packages fix security vulnerability

It was discovered that there were a number of integer overflow issues in Redis. It is currently believed that the issues only affect 32-bit based systems CVE-2021-21309...

MGASA-2021-0155 Updated redis packages fix security vulnerability

It was discovered that there were a number of integer overflow issues in Redis. It is currently believed that the issues only affect 32-bit based systems CVE-2021-21309...

CVE-2021-22194

In all versions of GitLab, marshalled session keys were being stored in Redis...

CVE-2021-22194

In all versions of GitLab, marshalled session keys were being stored in Redis...

CVE-2021-22194

In all versions of GitLab, marshalled session keys were being stored in Redis...

CVE-2021-22194

In all versions of GitLab, marshalled session keys were being stored in Redis...

Design/Logic Flaw

In all versions of GitLab, marshalled session keys were being stored in Redis...

CVE-2021-22194

GitLab (all versions) are affected by CVE-2021-22194 due to marshalled session keys being stored in Redis. The connected documents state this behavior but provide no specific fix/version; no exploitation details are documented. Remediation or patch details are not specified in the supplied source...

CVE-2021-22194

In all versions of GitLab, marshalled session keys were being stored in Redis...

CVE-2021-22194

Removed by vendor...

CVE-2021-3470

A heap overflow issue was found in Redis when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use jemalloc or glibc...

OESA-2021-1093 redis security update

Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bi...

PT-2021-14905 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab affected versions not specified Description: The issue concerns the storage of marshalled session keys in Redis, affecting all versions of GitLab. Recommendations: At the moment, there is no information about a newer version that...

GitLab 安全漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions after...

GitLab 未授权RCE漏洞（CVE-2021-22192）

When rendering wiki content with certain extensions such as .rmd, renderwikicontent will call othermarkupunsafe which will end up calling GitHub::Markup.render from the github-markup gem. Files with any extension can be uploaded by checking out the wiki with git, commiting the files and pushing t...