Lucene search
+L

3424 matches found

OSV
OSV
added 2025/11/29 9:4 a.m.13 views

RLSA-2025:20955 Important: redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

8.8CVSS8.6AI score0.86767EPSS
SaveExploits15References5
OSV
OSV
added 2025/11/29 9:2 a.m.25 views

RLSA-2025:19238 Important: redis:6 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

8.8CVSS8.6AI score0.86767EPSS
SaveExploits15References5
Rockylinux
Rockylinux
added 2025/11/29 9:2 a.m.30 views

redis:6 security update

An update is available for module.redis, redis. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Redis is an advanced key-value store. It is often referred to as ...

9.9CVSS9AI score0.86767EPSS
SaveExploits15
OpenVAS
OpenVAS
added 2025/11/28 12:0 a.m.5 views

Ubuntu: Security Advisory (USN-7893-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS6.8AI score0.86767EPSS
SaveExploits15References2
RedhatCVE
RedhatCVE
added 2025/11/27 7:5 a.m.9 views

CVE-2025-64344

A flaw was found in Suricata. This vulnerability allows a stack overflow via working with large buffers in Lua scripts...

7.5CVSS6.8AI score0.00345EPSS
SaveExploits0References5
NVD
NVD
added 2025/11/26 11:15 p.m.12 views

CVE-2025-64344

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected wh...

7.5CVSS0.00345EPSS
SaveExploits0References2
OSV
OSV
added 2025/11/26 11:15 p.m.5 views

DEBIAN-CVE-2025-64344

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected wh...

7.5CVSS5.5AI score0.00345EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/26 11:15 p.m.5 views

UBUNTU-CVE-2025-64344

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected wh...

7.5CVSS6AI score0.00345EPSS
SaveExploits0References5
CVE
CVE
added 2025/11/26 11:5 p.m.24 views

CVE-2025-64344

CVE-2025-64344 affects Suricata, an IDS/IPS/NSM engine. The issue is a stack overflow caused by unbounded stack allocation when processing large buffers in Lua scripts (LuaPushStringBuffer), potentially triggered by large buffers in Lua rules or output scripts. Affected versions are prior to 7.0....

7.5CVSS6.6AI score0.00345EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2025/11/26 11:5 p.m.10 views

CVE-2025-64344

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected wh...

7.5CVSS5.5AI score0.00345EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2025/11/26 11:5 p.m.7 views

CVE-2025-64344

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected wh...

7.5CVSS7AI score0.00345EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/11/26 11:5 p.m.15 views

CVE-2025-64344 Suricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBuffer

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected wh...

7.5CVSS0.00345EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/11/26 11:5 p.m.5 views

CVE-2025-64344 Suricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBuffer

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected wh...

7.5CVSS6.6AI score0.00345EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/26 11:5 p.m.10 views

EUVD-2025-199771

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected wh...

7.5CVSS6.5AI score0.00345EPSS
SaveExploits0References2
OSV
OSV
added 2025/11/26 11:5 p.m.17 views

CVE-2025-64344 Suricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBuffer

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected wh...

7.5CVSS6.8AI score
SaveExploits0References4
OSV
OSV
added 2025/11/26 1:51 p.m.9 views

USN-7893-1 valkey vulnerabilities

Benny Isaacs, Nir Brakha, and Sagi Tzadik discovered that Valkey incorrectly handled memory when running Lua scripts. An authenticated attacker could use this vulnerability to trigger a use-after-free condition, and potentially achieve remote code execution on the Valkey server. CVE-2025-49844 It...

9.9CVSS7.7AI score0.86767EPSS
SaveExploits15References6
Ubuntu
Ubuntu
added 2025/11/26 1:51 p.m.11 views

USN-7893-1: Valkey vulnerabilities

Benny Isaacs, Nir Brakha, and Sagi Tzadik discovered that Valkey incorrectly handled memory when running Lua scripts. An authenticated attacker could use this vulnerability to trigger a use-after-free condition, and potentially achieve remote code execution on the Valkey server. CVE-2025-49844 It...

9.9CVSS8.9AI score0.86767EPSS
SaveExploits15
Positive Technologies
Positive Technologies
added 2025/11/26 12:0 a.m.12 views

PT-2025-48207

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.13 Suricata versions prior to 8.0.2 Description Suricata is a network IDS, IPS and NSM engine. Processing large buffers in Lua scripts before versions 7.0.13 and 8.0.2 can lead to a stack overflow. Users utilizin...

7.5CVSS6.7AI score0.00345EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/11/26 12:0 a.m.9 views

Suricata 安全漏洞

Suricata is a network IDS, IPS and NSM engine from the Open Information Security Foundation. A security vulnerability exists in Suricata versions prior to 7.0.13 and prior to 8.0.2, which stems from a stack overflow in a Lua script that handles large buffers, potentially causing a crash...

7.5CVSS6.6AI score0.00345EPSS
SaveExploits0References2
OSV
OSV
added 2025/11/25 9:18 a.m.6 views

RLSA-2025:21936 Important: valkey security update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

8.8CVSS8.6AI score0.86767EPSS
SaveExploits15References5
Rows per page
Query Builder