22 matches found
redis-8.0.2-1.1 on GA media (moderate)
redis-8.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:15293-1 Rating: moderate Cross-References: CVE-2024-31227 CVE-2024-31228 CVE-2024-31449 CVE-2024-46981 CVE-2024-51741 CVE-2025-21605 CVE-2025-27151 CVSS scores: CVE-2024-31227 SUSE : 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H...
Fedora: Security Advisory (FEDORA-2024-e717420659)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 40 : redict (2025-282df7372b)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-282df7372b advisory. update to 7.3.2 fixes CVE-2024-46981 fixes CVE-2024-51741 fixes CVE-2024-31449 fixes CVE-2024-31227 fixes CVE-2024-31228 Tenable has extracted the...
CVE-2024-31227 affecting package valkey for versions less than 8.0.1-1
CVE-2024-31227 affecting package valkey for versions less than 8.0.1-1. An upgraded version of the package is available that resolves this issue...
valkey-8.0.1-1.1 on GA media (moderate)
valkey-8.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14412-1 Rating: moderate Cross-References: CVE-2024-31227 CVE-2024-31228 CVE-2024-31449 CVSS scores: CVE-2024-31227 SUSE : 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H CVE-2024-31228 SUSE : 6.5...
Fedora 40 : valkey (2024-8a9a692906)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-8a9a692906 advisory. update to 8.0.1 fixes CVE-2024-31449 Lua library commands may lead to stack overflow and potential RCE. CVE-2024-31227 Potential Denial-of-service d...
Fedora 39 : valkey (2024-83e96146cf)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-83e96146cf advisory. update to 8.0.1 fixes CVE-2024-31449 Lua library commands may lead to stack overflow and potential RCE. CVE-2024-31227 Potential Denial-of-service d...
Fedora: Security Advisory (FEDORA-2024-8a9a692906)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-83e96146cf)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-5d4eb04e76)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 40 : redis (2024-5d4eb04e76)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5d4eb04e76 advisory. Redis Community Edition 7.2.6 Released Wed 02 Oct 2024 20:17:04 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes CVE-2024-3144...
SUSE SLES15 / openSUSE 15 Security Update : redis7 (SUSE-SU-2024:3549-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3549-1 advisory. - CVE-2024-31227: Fixed parsing issue leading to denail of service bsc1231266 - CVE-2024-31228: Fixed unbounded...
openSUSE Security Advisory (SUSE-SU-2024:3549-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2024:3549-1 Security update for redis7
This update for redis7 fixes the following issues: - CVE-2024-31227: Fixed parsing issue leading to denail of service bsc1231266 - CVE-2024-31228: Fixed unbounded recursive pattern matching bsc1231265 - CVE-2024-31449: Fixed integer overflow bug in Lua bittohex bsc1231264...
SUSE SLES15 / openSUSE 15 Security Update : redis (SUSE-SU-2024:3535-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3535-1 advisory. - CVE-2024-31227: Fixed parsing issue leading to denail of service bsc1231266 - CVE-2024-31228: Fixed unbounded...
SUSE SLES15 / openSUSE 15 Security Update : redis7 (SUSE-SU-2024:3537-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3537-1 advisory. - CVE-2024-31227: Fixed parsing issue leading to denail of service bsc1231266 - CVE-2024-31228: Fixed unbounded...
openSUSE Security Advisory (SUSE-SU-2024:3535-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2024:3537-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-31227 vulnerabilities
Vulnerabilities for packages: redis...
CVE-2024-31227
Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users...