Lucene search
+L

1437 matches found

OpenVAS
OpenVAS
•added 2023/10/25 12:00 a.m.•28 views

Mageia: Security Advisory (MGASA-2023-0301)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.6CVSS6.6AI score0.00438EPSS
SaveExploits0References4
osv_mgasa
osv_mgasa
•added 2023/10/24 5:25 p.m.•20 views

MGASA-2023-0301 Updated redis package fixes a security vulnerability

Redis upstream published a fix for CVE-2023-45145. CVE-2023-45145: The wrong order of listen2 and chmod2 calls creates a race condition that can be used by another process to bypass desired Unix socket permissions on startup...

3.6CVSS6.3AI score0.00438EPSS
SaveExploits0References3
Mageia
Mageia
•added 2023/10/24 5:25 p.m.•46 views

Updated redis package fixes a security vulnerability

Redis upstream published a fix for CVE-2023-45145. CVE-2023-45145: The wrong order of listen2 and chmod2 calls creates a race condition that can be used by another process to bypass desired Unix socket permissions on startup...

3.6CVSS6.4AI score0.00438EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/10/24 12:00 a.m.•18 views

Debian: Security Advisory (DLA-3627-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.6CVSS6.6AI score0.00438EPSS
SaveExploits0References3
Debian
Debian
•added 2023/10/23 1:01 p.m.•35 views

[SECURITY] [DLA 3627-1] redis security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3627-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 23, 2023 https://wiki.debian.org/LTS -...

3.6CVSS6.1AI score0.00438EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/10/19 12:59 a.m.•15 views

SUSE CVE-2023-45145

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, another process...

7CVSS6AI score0.00438EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
•added 2023/10/18 11:57 p.m.•39 views

CVE-2023-45145

A flaw was found in Redis, an in-memory database that persists on disk. On startup, Redis listens on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, anothe...

3.6CVSS6.2AI score0.00438EPSS
SaveExploits0References4
osv_azl
osv_azl
•added 2023/10/18 9:15 p.m.•22 views

AZL-31653 CVE-2023-45145 affecting package redis for versions less than 6.2.14-1

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, another process...

3.6CVSS6AI score0.00438EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2023/10/18 9:15 p.m.•19 views

DEBIAN-CVE-2023-45145

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, another process...

3.6CVSS6AI score0.00438EPSS
SaveExploits0References1
osv_alpine
osv_alpine
•added 2023/10/18 9:15 p.m.•20 views

ALPINE-CVE-2023-45145

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, another process...

3.6CVSS6AI score0.00438EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/18 9:15 p.m.•35 views

CVE-2023-45145

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, another process...

3.6CVSS3.9AI score0.00438EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2023/10/18 9:15 p.m.•73 views

CVE-2023-45145

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, another process...

3.6CVSS6.1AI score0.00438EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2023/10/18 9:15 p.m.•19 views

UBUNTU-CVE-2023-45145

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, another process...

3.6CVSS6AI score0.00438EPSS
SaveExploits0References5
Prion
Prion
•added 2023/10/18 9:15 p.m.•49 views

Race condition

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, another process...

2.4CVSS3.8AI score0.00438EPSS
SaveExploits0References7Affected Software3
Mend
Mend
•added 2023/10/18 8:17 p.m.•9 views

CVE-2023-45145

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, another process...

3.6CVSS6AI score0.00438EPSS
SaveExploits0References12
osv_cve
osv_cve
•added 2023/10/18 8:17 p.m.•82 views

CVE-2023-45145 Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, another process...

3.6CVSS4.7AI score
SaveExploits0References9
AlpineLinux
AlpineLinux
•added 2023/10/18 8:17 p.m.•53 views

CVE-2023-45145

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, another process...

3.6CVSS6AI score0.00438EPSS
SaveExploits0
FreeBSD
FreeBSD
•added 2023/10/18 12:00 a.m.•44 views

redis -- Possible bypassing Unix socket permissions

Redis core team reports: The wrong order of listen2 and chmod2 calls creates a race condition that can be used by another process to bypass desired Unix socket permissions on startup...

3.6CVSS6.4AI score0.00438EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/18 12:00 a.m.•6 views

CVE-2023-45145: Exposure of Resource to Wrong Sphere

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, another process...

3.6CVSS6.1AI score0.00438EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2023/10/18 12:00 a.m.•39 views

Redis Unix Socket Permission Access Bypass Vulnerability (GHSA-ghmp-889m-7cvx)

Redis is prone to a vulnerability that allows to bypass desired Unix socket permissions on startup. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

3.6CVSS6.6AI score0.00438EPSS
SaveExploits0References1
Rows per page
Query Builder