Red Database Unauthorized Access

The vulnerability of the reporting subsystem of the “Red Database” database management system is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to confidential information...

Red Database IndexNodes Function DoS

The vulnerability of the IndexNodes::get function in the btr.cpp module of the “Red Database” database management system is related to synchronization errors. Exploiting this vulnerability could allow an attacker to cause service failures...

Red Database CCH_RELEASE Buffer Overflow DoS

The vulnerability of the CCHRELEASE function in the cch.cpp module of the “Red Database” database management system is related to a violation of expected behavior. Exploiting this vulnerability may allow an attacker, operating remotely, to cause service failure...

PT-2026-34588

Уязвимость функции IndexNodes::get модуля btr.cpp системы управления базами данных «Ред База Данных» связана с ошибками синхронизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

PT-2026-34587

Уязвимость подсистемы журналирования системы управления базами данных «Ред База Данных» связана с недостаточной защитой регистрационных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к конфиденциальной информации...

Red Database ParamsCalculator Heap Buffer Overflow DoS

The vulnerability of the ParamsCalculator::makeFromValues function in the ParamsCalculator.cpp module of the “Red Database” database management system is related to mutual locking of execution threads. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Red Database DPM_scanPages Heap Buffer Overflow DoS

The vulnerability of the DPMscanPages function in the dpm.epp module of the “Red Database” database management system is related to the improper release of page pointer vectors before the database stops functioning. Exploiting this vulnerability could allow a remote attacker to cause service...

Red Database prepare_update() function Heap Buffer Overflow DoS

The vulnerability of the prepareupdate function in the vio.cpp module of the “Red Database” database management system is related to improper initialization of resources when processing queries with the WITH LOCK construct and the creation of a delta version of the record. Exploiting this...

Red Database Function Heap Buffer Overflow DoS

The vulnerability of the ERRbugcheckmsg function in the err.cpp module of the “Red Database” database management system is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ROS-20251117-03

Vulnerability of the xdrtrrqmessage function of the protocol.cpp module of the Red Database Management System is related to dereferencing of a null pointer. Data" is related to dereferencing of a null pointer. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a...

Red Database Config::checkParameterValue Information Disclosure

The vulnerability of the Config::checkParameterValue function in the config.cpp module of the “Red Database” database management system is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...

Red Database Manager getConnection DoS

The vulnerability of the Manager::getConnection function in the ExtDS.cpp module of the “Red Database” database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure in the server...

Red Database ServerTraceManager initServerTrace Concealment

The vulnerability of the ServerTraceManager::initServerTrace function in the ServerTraceManager.cpp module of the “Red Database” database management system is related to the loss of information that is crucial for ensuring security. Exploiting this vulnerability could allow a malicious actor to...

Red Database parseFileName File Access

The vulnerability of the parseFileName function in the SysFunction.cpp module of the “Red Database” database management system is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow a malicious actor to gain access to arbitrary files...

Red Database Privilege Manipulation

The vulnerability of the “Red Database” database management system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of protected information...

Red Database Synchronization Failure

The vulnerability of the “Red Database” database management system is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause a service failure on the server...

Red Database Manager getConnection DoS

The vulnerability of the Manager::getConnection function in the ExtDS.cpp module of the “Red Database” database management system is related to resource management errors. Exploiting this vulnerability could allow an attacker to cause a service failure on the server...

Red Database TracePluginImpl Log Record Trig

The vulnerability of the TracePluginImpl::logRecordTrig function in the TracePluginImpl.cpp module of the “Red Database” database management system is related to the loss of important security-relevant information. Exploiting this vulnerability could allow an attacker to conceal their actions...

Red Database Plugin Buffer Overflow DoS

The vulnerability in the ConfiguredPlugin::release function of the PluginManager.cpp module of the database management system “Red Database” is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure on the...

Red Database Heap Buffer Overflow DoS

The vulnerability of the AggTraceMemoryFile::updateVersion function in the AggTraceSharedMemory.cpp module of the “Red Database” database management system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service...