27 matches found
Memory corruption
Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c...
CVE-2021-46481
Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c...
CVE-2021-46481
CVE-2021-46481 affects Jsish v3.5.0, with the NVD describing a memory leak via linenoise.c (src/linenoise.c). CNVD-2022-07933 additionally references a buffer/heap overflow vulnerability related to Jsish linenoise operations. The exact affected product/version in public disclosures is Jsish 3.5.0...
CVE-2013-7458
linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .redisclihistory, which allows local users to obtain sensitive information by reading the file...
CVE-2013-7458
linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .redisclihistory, which allows local users to obtain sensitive information by reading the file...
CVE-2013-7458
linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .redisclihistory, which allows local users to obtain sensitive information by reading the file...
CVE-2013-7458
Redis before 3.2.3 uses world-readable permissions for the linenoise history file (.rediscli_history), enabling local users to read sensitive information. This CVE-2013-7458 describes a local information disclosure due to file permissions. Connected sources corroborate the affected component (lin...