org.redisson:redisson-tomcat (2.12.2), org.redisson:redisson-tomcat-6 (2.12.2) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.12.2)

org.redisson:redisson MAVEN version 2.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.12.2 - org.redisson:redisson-tomcat-6 2.12.2 - org.redisson:redisson-tomcat-7 2.12.2 ...

org.redisson:redisson-tomcat (2.12.3), org.redisson:redisson-tomcat-6 (2.12.3) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.12.3)

org.redisson:redisson MAVEN version 2.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.12.3 - org.redisson:redisson-tomcat-6 2.12.3 - org.redisson:redisson-tomcat-7 2.12.3 ...

org.redisson:redisson-tomcat (2.12.5), org.redisson:redisson-tomcat-6 (2.12.5) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.12.5)

org.redisson:redisson MAVEN version 2.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.12.5 - org.redisson:redisson-tomcat-6 2.12.5 - org.redisson:redisson-tomcat-7 2.12.5 ...

com.github.slacrey:redisson-extend (>=1.1.2150, <=2.15.0), org.redisson:redisson-hibernate (2.15.0) +15 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.15.0)

org.redisson:redisson MAVEN version 2.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.github.slacrey:redisson-extend =1.1.2150, =2.15.0 - org.redisson:redisson-hibernate 2.15.0 -...

org.redisson:redisson-hibernate (2.15.1), org.redisson:redisson-hibernate-4 (2.15.1) +14 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.15.1)

org.redisson:redisson MAVEN version 2.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-hibernate 2.15.1 - org.redisson:redisson-hibernate-4 2.15.1 - org.redisson:redisson-hibernate-...

com.datorama.oss:redison-replicated-map (1.0.0), com.datorama.oss:redisson-replicated-map (1.0.0) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.2.22)

org.redisson:redisson MAVEN version 2.2.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.datorama.oss:redison-replicated-map 1.0.0 - com.datorama.oss:redisson-replicated-map 1.0.0 Source cves:...

com.github.debop:hibernate-redis (2.3.0), com.testvagrant:optimus (>=1.2.0, <=1.3.6) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.3.0)

org.redisson:redisson MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.github.debop:hibernate-redis 2.3.0 - com.testvagrant:optimus =1.2.0, =1.3.6 Source cves: CVE-2023-42809 Source...

com.github.debop:hibernate-redis (2.3.1) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.5.0)

org.redisson:redisson MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.github.debop:hibernate-redis 2.3.1 Source cves: CVE-2023-42809 Source advisory: OSV:GHSA-4HVC-QWR2-F8RV...

org.redisson:redisson-tomcat (2.12.1), org.redisson:redisson-tomcat-6 (2.12.1) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.12.1)

org.redisson:redisson MAVEN version 2.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.12.1 - org.redisson:redisson-tomcat-6 2.12.1 - org.redisson:redisson-tomcat-7 2.12.1 ...

org.redisson:redisson-tomcat (2.12.4), org.redisson:redisson-tomcat-6 (2.12.4) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.12.4)

org.redisson:redisson MAVEN version 2.12.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.12.4 - org.redisson:redisson-tomcat-6 2.12.4 - org.redisson:redisson-tomcat-7 2.12.4 ...

Security Bulletin: Security Vulnerabilities in redisson package affect IBM Voice Gateway

Summary Security Vulnerabilities in redisson package affect the SMS Gateway component of IBM Voice Gateway Vulnerability Details CVEID: CVE-2023-42809 DESCRIPTION: Redisson could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By persuadi...

CVE-2023-42809

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

Deserialization of untrusted data

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

CVE-2023-42809 Redisson unsafe deserialization vulnerability

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

CVE-2023-42809 Redisson unsafe deserialization vulnerability

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

CVE-2023-42809

CVE-2023-42809 affects the Redisson Java Redis client (Netty). Before version 3.22.0, responses from a malicious Redis server could contain crafted Java objects that are deserialized by the client without sufficient validation, enabling arbitrary code execution and potential full system compromis...

CVE-2023-42809 Redisson unsafe deserialization vulnerability

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

CVE-2023-42809

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

CVE-2023-42809: Deserialization of Untrusted Data

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

PT-2023-28595 · Oracle · Java

Name of the Vulnerable Software and Affected Versions: Redisson versions prior to 3.22.0 Description: The issue concerns a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some messages received from the Redis server contain Java objects that the client deserializes witho...