Lucene search
K

13 matches found

OSV
OSV
added 2024/08/22 7:42 p.m.21 views

BIT-VALKEY-2023-28425 Specially crafted MSETNX command can lead to denial-of-service

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10...

5.5CVSS5.5AI score0.45293EPSS
Exploits0References5
OSV
OSV
added 2024/08/22 7:24 p.m.15 views

BIT-KEYDB-2023-28425 Specially crafted MSETNX command can lead to denial-of-service

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10...

5.5CVSS5.5AI score0.45293EPSS
Exploits0References5
OSV
OSV
added 2024/03/06 11:4 a.m.23 views

BIT-REDIS-2023-28425 Specially crafted MSETNX command can lead to denial-of-service

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10...

5.5CVSS5.5AI score0.45293EPSS
Exploits0References5
Amazon
Amazon
added 2023/05/03 12:0 a.m.4 views

Medium: redis6

Issue Overview: Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10...

6.5CVSS5.8AI score0.45293EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/03/30 12:0 a.m.33 views

Fedora 37 : redis (2023-86068d1187)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-86068d1187 advisory. Redis 7.0.10 Released Mon Mar 20 16:00:00 IST 2023 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: CVE-2023-28425...

5.5CVSS7.4AI score0.45293EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/03/23 12:0 a.m.33 views

FreeBSD : redis -- specially crafted MSETNX command can lead to denial-of-service (a60cc0e4-c7aa-11ed-8a4b-080027f5fec9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a60cc0e4-c7aa-11ed-8a4b-080027f5fec9 advisory. - Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version...

5.5CVSS7AI score0.45293EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/03/21 12:0 a.m.22 views

Redis 7.0.8 - 7.0.9 DoS Vulnerability

Redis is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...

5.5CVSS4.4AI score0.45293EPSS
Exploits0References2
NVD
NVD
added 2023/03/20 8:15 p.m.17 views

CVE-2023-28425

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10...

5.5CVSS5.7AI score0.45293EPSS
Exploits0References4
OSV
OSV
added 2023/03/20 8:15 p.m.3 views

AZL-25674 CVE-2023-28425 affecting package redis for versions less than 6.2.12-1

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10...

5.5CVSS6.2AI score0.45293EPSS
Exploits0References1
Prion
Prion
added 2023/03/20 8:15 p.m.28 views

Command injection

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10...

1.7CVSS5.4AI score0.45293EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/20 7:3 p.m.5 views

CVE-2023-28425 Specially crafted MSETNX command can lead to denial-of-service

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10...

5.5CVSS5.4AI score0.45293EPSS
Exploits0References4
OSV
OSV
added 2023/03/20 7:3 p.m.27 views

CVE-2023-28425 Specially crafted MSETNX command can lead to denial-of-service

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10...

5.5CVSS4.3AI score0.45293EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/03/20 12:0 a.m.3 views

PT-2023-2221

Name of the Vulnerable Software and Affected Versions: Redis versions 7.0.8 through 7.0.9 Description: The issue is related to the lack of input data sanitization in the Redis database management system. Exploitation of this issue may allow an attacker to send a specially crafted MSETNX command,...

9.8CVSS7.8AI score0.88997EPSS
Exploits10References110
Rows per page
Query Builder