OPENSUSE-SU-2024:11299-1 redis-6.2.5-1.2 on GA media

These are all security issues fixed in the redis-6.2.5-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13047-1 redis-7.0.12-1.1 on GA media

These are all security issues fixed in the redis-7.0.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13354-1 redis-7.2.2-1.1 on GA media

These are all security issues fixed in the redis-7.2.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12361-1 redis-7.0.5-1.1 on GA media

These are all security issues fixed in the redis-7.0.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10552-1 redis-3.2.4-1.1 on GA media

These are all security issues fixed in the redis-3.2.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12619-1 redis-7.0.8-1.1 on GA media

These are all security issues fixed in the redis-7.0.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12030-1 redis-6.2.7-1.1 on GA media

These are all security issues fixed in the redis-6.2.7-1.1 package on the GA media of openSUSE Tumbleweed...

RLSA-2024:3264 Important: pcp security update

Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fixes: pcp:...

GO-2024-2877 ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd

ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache in github.com/argoproj/argo-cd...

SUSE CVE-2021-32672

Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger's protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support 3.2 or newer...

RHEL 8 : 5_redis (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - redis: integer overflow in the getnum function in luastruct.c could lead to a DoS CVE-2020-14147 Note that Nessus h...

RHEL 8 : redis (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - redis: Redis SORTRO may bypass ACL configuration CVE-2023-41053 Note that Nessus has not tested for this issue but...

RHEL 9 : redis (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - redis: Redis SORTRO may bypass ACL configuration CVE-2023-41053 Note that Nessus has not tested for this issue but...

Important: Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.11.5 security update

An update is now available for Red Hat OpenShift GitOps v1.11.5 to address the CVE-2024-31989, Unprivileged pod in a different namespace on the same cluster could connect to the Redis server on port 6379. Red Hat Product Security has rated this update as having a security impact of Important. A...

BIT-ARGO-CD-2024-31989 ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It has been discovered that an unprivileged pod in a different namespace on the same cluster could connect to the Redis server on port 6379. Despite having installed the latest version of the VPC CNI plugin on the EKS...

pcp: exposure of the redis server backend allows remote command execution via pmproxy

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...

Important: Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.12.3 security update

An update is now available for Red Hat OpenShift GitOps v1.12.3 to address the CVE-2024-31989, Unprivileged pod in a different namespace on the same cluster could connect to the Redis server on port 6379. Red Hat Product Security has rated this update as having a security impact of Important. A...

Important: Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.10.6 security update

An update is now available for Red Hat OpenShift GitOps v1.10.6 to address the CVE-2024-31989, Unprivileged pod in a different namespace on the same cluster could connect to the Redis server on port 6379. Red Hat Product Security has rated this update as having a security impact of Important. A...

RHEL 8 : pcp (RHSA-2024:3392)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3392 advisory. Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance...

PT-2024-36018 · Winnmp · Winnmp

Name of the Vulnerable Software and Affected Versions: WinNMP version 19.02 Description: A vulnerability has been discovered that allows for an XSS attack via the /tools/redis.php page, specifically in the k, hash, key, and p parameters. This could enable a remote user to submit a specially craft...