Lucene search
+L

7 matches found

osv_cve
osv_cve
•added 2024/04/09 5:35 p.m.•28 views

CVE-2024-25116 Specially crafted CF.RESERVE command can lead to denial-of-service

RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, authenticated users can use the CF.RESERVE command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in RedisBloom 2.4.7...

5.5CVSS6.8AI score
SaveExploits0References4
Mend
Mend
•added 2024/04/09 5:35 p.m.•8 views

CVE-2024-25116

RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, authenticated users can use the "CF.RESERVE" command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in RedisBloom 2.4...

6.8CVSS6AI score0.00198EPSS
SaveExploits0References4
CVE
CVE
•added 2024/04/09 5:35 p.m.•82 views

CVE-2024-25116

RedisBloom adds probabilistic data structures to Redis. In versions prior to 2.4.7 and 2.6.10, authenticated users can issue CF.RESERVE to trigger a runtime assertion that terminates the Redis server process. The issue is fixed in RedisBloom 2.4.7 and 2.6.10. Exposure: LOCAL access with low privi...

5.5CVSS6AI score0.00198EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/09 5:35 p.m.•18 views

CVE-2024-25116 Specially crafted CF.RESERVE command can lead to denial-of-service

RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, authenticated users can use the CF.RESERVE command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in RedisBloom 2.4.7...

5.5CVSS6AI score0.00198EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/04/09 5:35 p.m.•28 views

CVE-2024-25116 Specially crafted CF.RESERVE command can lead to denial-of-service

RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, authenticated users can use the CF.RESERVE command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in RedisBloom 2.4.7...

5.5CVSS5.7AI score0.00198EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•8 views

PT-2024-20758

Name of the Vulnerable Software and Affected Versions RedisBloom versions 2.0.0 through 2.4.6 RedisBloom versions 2.6.0 through 2.6.9 Description RedisBloom adds a set of probabilistic data structures to Redis. Authenticated users can use the CF.RESERVE command to trigger a runtime assertion and...

5.5CVSS5.8AI score0.00198EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/09 12:00 a.m.•4 views

CVE-2024-25116: Improper Input Validation

RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, authenticated users can use the CF.RESERVE command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in RedisBloom 2.4.7...

5.5CVSS6AI score0.00198EPSS
SaveExploits0References2
Rows per page
Query Builder