Lucene search
K

6 matches found

OSV
OSV
added 2025/06/23 10:15 a.m.3 views

CVE-2025-52935

Integer Overflow or Wraparound vulnerability in dragonflydb dragonfly src/redis/lua/struct modules. This vulnerability is associated with program files luastruct.C. This issue affects dragonfly: 1.30.1, 1.30.0, 1.28.18...

9.4CVSS7.2AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/06/23 9:27 a.m.3 views

CVE-2025-52935 Integer Overflow or Wraparound vulnerability in dragonflydb/dragonfly

Integer Overflow or Wraparound vulnerability in dragonflydb dragonfly src/redis/lua/struct modules. This vulnerability is associated with program files luastruct.C. This issue affects dragonfly: 1.30.1, 1.30.0, 1.28.18...

9.4CVSS6.6AI score0.00297EPSS
Exploits0References2
CVE
CVE
added 2025/06/23 9:27 a.m.19 views

CVE-2025-52935

The CVE-2025-52935 entry concerns an Integer Overflow or Wraparound vulnerability in dragonflydb/dragonfly, specifically in the src/redis/lua/struct modules (lua_struct.C). Affected versions are dragonfly 1.28.18 through 1.30.1. The issue is confirmed across multiple sources (e.g., PT-2025-26585)...

9.4CVSS6.7AI score0.00297EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/23 12:0 a.m.1 views

Dragonfly 输入验证错误漏洞

Dragonfly is a framework open-sourced by DragonflyDB that allows dynamic processing of any content type. An input validation error vulnerability exists in Dragonfly versions 1.30.1 and 1.30.0 and 1.28.18, which stems from an integer overflow or wrap-around error in the luastruct.C file...

9.4CVSS6.8AI score0.00297EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:12 a.m.3 views

SUSE CVE-2015-8080

Integer overflow in the getnum function in luastruct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox...

7.5CVSS7.8AI score0.06469EPSS
Exploits1References6
OSV
OSV
added 2020/06/15 6:15 p.m.3 views

AZL-6842 CVE-2020-14147 affecting package redis for versions less than 5.0.5-7

An integer overflow in the getnum function in luastruct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox restrictions via a large...

7.7CVSS7.3AI score0.00416EPSS
Exploits0References1
Rows per page
Query Builder