Redis: Remote code execution

Background Redis is an open source BSD licensed, in-memory data structure store, used as a database, cache and message broker. Description It was discovered that there were a number of integer overflow issues in Redis. Impact A remote attacker, able to connect to a Redis instance, could send a...

PT-2021-7834

Name of the Vulnerable Software and Affected Versions Redis versions prior to 5.0.10 Redis versions prior to 6.0.9 Redis versions prior to 6.2.0 Description A heap overflow issue was found in Redis when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of boun...

CVE-2021-3470: Improper Restriction of Operations within the Bounds of a Memory Buffer

A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use...

Redis Labs Redis 多款产品缓冲区错误漏洞

Redis Labs Redis is the United States Redis Labs, Inc. of a set of open-source use of ANSI C written to support the network , can be based on the memory can also be a persistent log-type , key-value Key-Value storage database , and provides a variety of languages API. A buffer overflow...

PT-2021-2663

Name of the Vulnerable Software and Affected Versions: Redis affected versions not specified Description: The issue is related to the memtest preserving test function in the memtest.c component of the Redis database management system. It involves a buffer overflow in memory when creating an...

Updated redis packages fix security vulnerability

It was discovered that there were a number of integer overflow issues in Redis. It is currently believed that the issues only affect 32-bit based systems CVE-2021-21309...

MGASA-2021-0155 Updated redis packages fix security vulnerability

It was discovered that there were a number of integer overflow issues in Redis. It is currently believed that the issues only affect 32-bit based systems CVE-2021-21309...

CVE-2021-22194

In all versions of GitLab, marshalled session keys were being stored in Redis...

CVE-2021-22194

In all versions of GitLab, marshalled session keys were being stored in Redis...

Design/Logic Flaw

In all versions of GitLab, marshalled session keys were being stored in Redis...

CVE-2021-22194

In all versions of GitLab, marshalled session keys were being stored in Redis...

CVE-2021-22194

In all versions of GitLab, marshalled session keys were being stored in Redis...

CVE-2021-22194

In all versions of GitLab, marshalled session keys were being stored in Redis...

CVE-2021-22194

Removed by vendor...

CVE-2021-22194

GitLab (all versions) are affected by CVE-2021-22194 due to marshalled session keys being stored in Redis. The connected documents state this behavior but provide no specific fix/version; no exploitation details are documented. Remediation or patch details are not specified in the supplied source...

CVE-2021-22194

In all versions of GitLab, marshalled session keys were being stored in Redis...

CVE-2021-3470

A heap overflow issue was found in Redis when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use jemalloc or glibc...

OESA-2021-1093 redis security update

Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bi...

PT-2021-14905 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab affected versions not specified Description: The issue concerns the storage of marshalled session keys in Redis, affecting all versions of GitLab. Recommendations: At the moment, there is no information about a newer version that...

GitLab 安全漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions after...