Lucene search
+L

5163 matches found

OSV
OSV
•added 2024/10/09 4:30 p.m.•17 views

BIT-KEYDB-2024-31227 Denial-of-service due to malformed ACL selectors in Redis

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users...

4.4CVSS5.5AI score0.00398EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/10/07 11:25 p.m.•21 views

CVE-2024-31227

A flaw was found in Redis. This flaw allows an authenticated attacker with sufficient privileges to create a malformed ACL selector that triggers a server panic and subsequent denial of service when accessed. Mitigation Mitigation for this issue is either not available or the currently available...

4.4CVSS5.1AI score0.00398EPSS
SaveExploits0References5
OSV
OSV
•added 2024/10/07 8:15 p.m.•18 views

AZL-50154 CVE-2024-31228 affecting package redis for versions less than 6.2.16-1

Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as KEYS, SCAN, PSUBSCRIBE, FUNCTION LIST, COMMAND LIST and ACL definitions. Matching of extremel...

6.5CVSS6.6AI score0.01011EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/07 8:15 p.m.•13 views

AZL-52008 CVE-2024-31227 affecting package valkey for versions less than 8.0.1-1

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users...

4.4CVSS6.6AI score0.00398EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/07 8:15 p.m.•9 views

ALPINE-CVE-2024-31227

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users...

4.4CVSS6.7AI score0.00398EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/07 8:15 p.m.•6 views

DEBIAN-CVE-2024-31227

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users...

4.4CVSS5.9AI score0.00398EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/07 8:15 p.m.•23 views

UBUNTU-CVE-2024-31227

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users...

4.4CVSS6.1AI score0.00398EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2024/10/07 7:51 p.m.•17 views

CVE-2024-31227

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users...

4.4CVSS5.7AI score0.00398EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/10/07 7:51 p.m.•22 views

CVE-2024-31227 Denial-of-service due to malformed ACL selectors in Redis

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users...

4.4CVSS6.9AI score0.00398EPSS
SaveExploits0References2
CVE
CVE
•added 2024/10/07 7:51 p.m.•508 views

CVE-2024-31227

Redis 7.x is affected by CVE-2024-31227: authenticated attacker with high privileges can craft a malformed ACL selector that triggers a server panic and DoS. The issue exists in Redis 7 versions before 7.2.6 and 7.4.1. Connected advisories corroborate the vulnerability and reference the same CVE ...

4.4CVSS5.3AI score0.00398EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/10/07 7:51 p.m.•27 views

CVE-2024-31227 Denial-of-service due to malformed ACL selectors in Redis

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users...

4.4CVSS0.00398EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2024/10/07 7:51 p.m.•12 views

CVE-2024-31227

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users...

4.4CVSS5.9AI score0.00398EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2024/10/07 12:00 a.m.•22 views

Redis 7.0.0 < 7.2.6, 7.4.0 DoS vulnerability

Redis is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...

4.4CVSS4.3AI score0.00398EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/10/04 3:05 a.m.•9 views

SUSE CVE-2024-31228

Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as KEYS, SCAN, PSUBSCRIBE, FUNCTION LIST, COMMAND LIST and ACL definitions. Matching of extremel...

6.5CVSS7.3AI score0.01011EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
•added 2024/10/03 12:00 a.m.•51 views

Jenkins LTS < 2.462.3 / Jenkins weekly < 2.479 Multiple Vulnerabilities

According to its its self-reported version number, the version of Jenkins running on the remote web server is Jenkins LTS prior to 2.462.3 or Jenkins weekly prior to 2.479. It is, therefore, affected by multiple vulnerabilities: - Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact...

4.3CVSS6.4AI score0.00822EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/10/02 4:44 p.m.•26 views

CVE-2024-47804

A flaw was found in Jenkins. When attempting to create an item prohibited by ACLhasCreatePermission2 or TopLevelItemDescriptorisApplicableInItemGroup through the Jenkins CLI or the REST API, if either of these checks fail, Jenkins creates the item in memory and only deletes it from disk. This may...

5.3CVSS6.1AI score0.00669EPSS
SaveExploits0References4
CVE
CVE
•added 2024/10/02 3:35 p.m.•359 views

CVE-2024-47804

CVE-2024-47804 describes a Jenkins item-creation restriction bypass: when creating a prohibited item via CLI/REST, the item is created in memory and only removed from disk, enabling attackers with Item/Configure permission to persist it. Affected versions: Jenkins 2.478 and earlier, LTS 2.462.2 a...

4.3CVSS6.8AI score0.00669EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/10/02 3:35 p.m.•46 views

CVE-2024-47804

If an attempt is made to create an item of a type prohibited by ACLhasCreatePermission2 or TopLevelItemDescriptorisApplicableInItemGroup through the Jenkins CLI or the REST API and either of these checks fail, Jenkins 2.478 and earlier, LTS 2.462.2 and earlier creates the item in memory, only...

0.00669EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/02 3:35 p.m.•23 views

CVE-2024-47804

If an attempt is made to create an item of a type prohibited by ACLhasCreatePermission2 or TopLevelItemDescriptorisApplicableInItemGroup through the Jenkins CLI or the REST API and either of these checks fail, Jenkins 2.478 and earlier, LTS 2.462.2 and earlier creates the item in memory, only...

6.9AI score0.00669EPSS
SaveExploits0References1
FreeBSD
FreeBSD
•added 2024/10/02 12:00 a.m.•28 views

redis,valkey -- Multiple vulnerabilities

Redis core team reports: CVE-2024-31449 Lua library commands may lead to stack overflow and potential RCE. CVE-2024-31227 Potential Denial-of-service due to malformed ACL selectors. CVE-2024-31228 Potential Denial-of-service due to unbounded pattern matching...

8.8CVSS7.2AI score0.04495EPSS
SaveExploits1References1
Rows per page
Query Builder