Lucene search
K

38 matches found

RedHat Linux
RedHat Linux
added 2025/07/21 1:24 a.m.3 views

redis: Redis Unauthenticated Denial of Service

A flaw was found in Redis. Unauthenticated connections can trigger repeated IP protocol errors, leading to client starvation and an application-level denial of service. This flaw allows an attacker to induce this condition without authentication. This issue results in a denial of service conditio...

7.5CVSS5.7AI score0.00457EPSS
Exploits0References11
OSV
OSV
added 2025/07/18 2:49 p.m.1 views

OESA-2025-1850 redis security update

Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an...

7.8CVSS8AI score0.18438EPSS
Exploits4References3
SUSE CVE
SUSE CVE
added 2025/07/07 11:22 p.m.1 views

SUSE CVE-2025-48367

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

7.5CVSS6.9AI score0.00457EPSS
Exploits0References14
NVD
NVD
added 2025/07/07 4:15 p.m.2 views

CVE-2025-48367

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

7.5CVSS0.00457EPSS
Exploits0References6
OSV
OSV
added 2025/07/07 4:15 p.m.1 views

ALPINE-CVE-2025-48367

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

7.5CVSS6.9AI score0.00457EPSS
Exploits0References1
OSV
OSV
added 2025/07/07 4:15 p.m.2 views

DEBIAN-CVE-2025-48367

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

7.5CVSS4.4AI score0.00457EPSS
Exploits0References1
OSV
OSV
added 2025/07/07 4:15 p.m.1 views

AZL-64809 CVE-2025-48367 affecting package redis for versions less than 6.2.18-3

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

7.5CVSS5.7AI score0.00457EPSS
Exploits0References1
OSV
OSV
added 2025/07/07 4:15 p.m.0 views

UBUNTU-CVE-2025-48367

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

7.5CVSS5.8AI score0.00457EPSS
Exploits0References10
AlpineLinux
AlpineLinux
added 2025/07/07 3:25 p.m.5 views

CVE-2025-48367

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

7.5CVSS6.5AI score0.00457EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2025/07/07 3:25 p.m.5 views

CVE-2025-48367

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

7.5CVSS4.4AI score0.00457EPSS
Exploits0
OSV
OSV
added 2025/07/07 3:25 p.m.2 views

CVE-2025-48367 Redis DoS Vulnerability due to bad connection error handling

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

7.5CVSS4.1AI score0.00457EPSS
Exploits0References8
CVE
CVE
added 2025/07/07 3:25 p.m.219 views

CVE-2025-48367

Summary of CVE-2025-48367 (Redis) : An unauthenticated connection can trigger repeated IP protocol errors in Redis, leading to client starvation and a denial of service. The advisory notes fixes in Redis releases: 8.0.3, 7.4.5, 7.2.10, and 6.2.19. Public sources in the connected documents confirm...

7.5CVSS6.4AI score0.00457EPSS
Exploits0References6Affected Software1
CloudLinux
CloudLinux
added 2022/12/19 8:22 p.m.73 views

openssh: Fix of 2 CVEs

CVE-2019-6109: verify character encoding in progress display to avoid spoofing of scp client output - CVE-2016-10012: updated to fix server-side protocol errors observed during rekeying with compression enabled...

7.8CVSS2.4AI score0.09738EPSS
Exploits1
Gentoo Linux
Gentoo Linux
added 2020/07/26 12:0 a.m.30 views

QtNetwork: Denial of service

Background QtNetwork provides a set of APIs for programming applications that use TCP/IP. It is part of the Qt framework. Description A flaw was discovered in QtNetwork’s handling of OpenSSL protocol errors. Impact An attacker could cause a possible Denial of Service condition. Workaround There i...

7.5CVSS7.4AI score0.01567EPSS
Exploits1
The Hacker News
The Hacker News
added 2019/07/02 7:47 a.m.1 views

Firefox to Automatically Trust OS-Installed CA Certificates to Prevent TLS Errors

Mozilla has finally introduced a mechanism to let Firefox browser automatically fix certain TLS errors, often triggered when antivirus software installed on a system tries to intercept secure HTTPS connections. Most Antivirus software offers web security feature that intercepts encrypted HTTPS...

6.6AI score
Exploits0
OSV
OSV
added 2015/02/06 12:0 a.m.0 views

UBUNTU-CVE-2015-0244

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 does not properly handle errors while reading a protocol message, which allows remote attackers to conduct SQL injection attacks via crafted binary data in a parameter and causing an...

9.8CVSS7.2AI score0.0108EPSS
Exploits0References3
Cvelist
Cvelist
added 2007/01/23 12:0 a.m.15 views

CVE-2007-0419

The BEA WebLogic Server proxy plug-in before June 2006 for the Apache HTTP Server does not properly handle protocol errors, which allows remote attackers to cause a denial of service server outage...

6.6AI score0.00952EPSS
Exploits0References6
securityvulns
securityvulns
added 2003/05/30 12:0 a.m.34 views

[SECURITY] [DSA-307-1] New gps packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 307-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 27th, 2003 http://www.debian.org/security/faq -...

1.4AI score
Exploits0
Rows per page
Query Builder