Lucene search
+L

4084 matches found

OSV
OSV
•added 2024/10/07 8:15 p.m.•18 views

AZL-50129 CVE-2024-31449 affecting package redis for versions less than 6.2.14-3

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scriptin...

8.8CVSS6.8AI score0.04495EPSS
SaveExploits1References1
OSV
OSV
•added 2024/10/07 8:15 p.m.•7 views

DEBIAN-CVE-2024-31449

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scriptin...

8.8CVSS6.7AI score0.04495EPSS
SaveExploits1References1
OSV
OSV
•added 2024/10/07 8:15 p.m.•11 views

ALPINE-CVE-2024-31449

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scriptin...

8.8CVSS8.2AI score0.04495EPSS
SaveExploits1References1
OSV
OSV
•added 2024/10/07 8:15 p.m.•18 views

AZL-52004 CVE-2024-31449 affecting package valkey for versions less than 8.0.1-1

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scriptin...

8.8CVSS6.8AI score0.04495EPSS
SaveExploits1References1
OSV
OSV
•added 2024/10/07 8:15 p.m.•34 views

UBUNTU-CVE-2024-31449

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scriptin...

8.8CVSS6.9AI score0.04495EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/10/07 7:51 p.m.•70 views

CVE-2024-31449 Lua library commands may lead to stack overflow and RCE in Redis

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scriptin...

7CVSS7.9AI score0.04495EPSS
SaveExploits1References2
CVE
CVE
•added 2024/10/07 7:51 p.m.•603 views

CVE-2024-31449

CVE-2024-31449 affects Redis with Lua scripting. An authenticated user can trigger a stack overflow in the Lua bit library via a crafted script, potentially enabling remote code execution. The issue affects all Redis versions that support Lua scripting and is fixed in Redis 6.2.16, 7.2.6, and 7.4...

8.8CVSS7AI score0.04495EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2024/10/07 7:51 p.m.•3 views

CVE-2024-31449

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scriptin...

8.8CVSS0.04495EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/10/07 7:51 p.m.•65 views

CVE-2024-31449 Lua library commands may lead to stack overflow and RCE in Redis

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scriptin...

7CVSS0.04495EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2024/10/07 7:51 p.m.•65 views

CVE-2024-31449

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scriptin...

8.8CVSS7.4AI score0.04495EPSS
SaveExploits1
OSV
OSV
•added 2024/10/07 7:51 p.m.•44 views

CVE-2024-31449 Lua library commands may lead to stack overflow and RCE in Redis

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scriptin...

7CVSS5.4AI score
SaveExploits0References4
Debian CVE
Debian CVE
•added 2024/10/07 7:51 p.m.•43 views

CVE-2024-31449

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scriptin...

8.8CVSS6.7AI score0.04495EPSS
SaveExploits1
SUSE Linux
SUSE Linux
•added 2024/10/07 12:16 p.m.•24 views

Security update for redis7

This update for redis7 fixes the following issues: CVE-2024-31227: Fixed parsing issue leading to denail of service bsc1231266 CVE-2024-31228: Fixed unbounded recursive pattern matching bsc1231265 CVE-2024-31449: Fixed integer overflow bug in Lua bittohex bsc1231264 Patch Instructions: To install...

8.8CVSS7.1AI score0.04495EPSS
SaveExploits1References12
OSV
OSV
•added 2024/10/07 12:16 p.m.•30 views

SUSE-SU-2024:3537-1 Security update for redis7

This update for redis7 fixes the following issues: - CVE-2024-31227: Fixed parsing issue leading to denail of service bsc1231266 - CVE-2024-31228: Fixed unbounded recursive pattern matching bsc1231265 - CVE-2024-31449: Fixed integer overflow bug in Lua bittohex bsc1231264...

8.8CVSS6.2AI score0.04495EPSS
SaveExploits1References7
SUSE Linux
SUSE Linux
•added 2024/10/07 8:53 a.m.•29 views

Security update for redis

This update for redis fixes the following issues: CVE-2024-31227: Fixed parsing issue leading to denail of service bsc1231266 CVE-2024-31228: Fixed unbounded recursive pattern matching bsc1231265 CVE-2024-31449: Fixed integer overflow bug in Lua bittohex bsc1231264 Patch Instructions: To install...

8.8CVSS7.1AI score0.04495EPSS
SaveExploits1References12
OSV
OSV
•added 2024/10/07 8:53 a.m.•24 views

SUSE-SU-2024:3535-1 Security update for redis

This update for redis fixes the following issues: - CVE-2024-31227: Fixed parsing issue leading to denail of service bsc1231266 - CVE-2024-31228: Fixed unbounded recursive pattern matching bsc1231265 - CVE-2024-31449: Fixed integer overflow bug in Lua bittohex bsc1231264...

8.8CVSS6.2AI score0.04495EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2024/10/07 12:00 a.m.•21 views

Redis 安全漏洞

Redis is an open source, ANSI C, network-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis, Inc. that provides APIs in multiple languages. A security vulnerability exists in Redis. The vulnerability can be exploited by an attacker to remotely execute code...

8.8CVSS6AI score0.04495EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/07 12:00 a.m.•4 views

CVE-2024-31449: Improper Input Validation

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scriptin...

8.8CVSS7.4AI score0.04495EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2024/10/07 12:00 a.m.•42 views

Redis 2.6 < 6.2.16, 7.0.0. < 7.2.6, 7.4.0 RCE vulnerability

Redis is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...

8.8CVSS5.3AI score0.04495EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/10/07 12:00 a.m.•15 views

The vulnerability of the Redis database management system, related to buffer overflows in the stack, allows attackers to execute arbitrary code.

The vulnerability of the Redis database management system is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting a specially crafted Lua script remotely...

9CVSS7.3AI score0.04495EPSS
SaveExploits1References7Affected Software3
Rows per page
Query Builder