CVE-2024-25115

RedisBloom (the RedisBloom library) is affected by CVE-2024-25115 due to a heap overflow in CF.LOADCHUNK. Specifically, authenticated users could trigger a heap overflow in versions prior to 2.4.7 and prior to 2.6.10, potentially enabling remote code execution. The issue is fixed in RedisBloom 2....

CVE-2024-25115 RedisBloom heap buffer overflow in CF.LOADCHUNK command

RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, specially crafted CF.LOADCHUNK commands may be used by authenticated users to perform heap overflow, which may lead to remote code execution. The problem is fixed in...

RedisBloom 安全漏洞

RedisBloom is a library from the RedisBloom open source. Adds a set of probabilistic data structures to Redis. A security vulnerability exists in RedisBloom that stems from the possibility that an authenticated user may be able to perform a heap overflow using specially crafted commands, which...

RedisBloom 安全漏洞

RedisBloom is a library from the RedisBloom open source. Adds a set of probabilistic data structures to Redis. A security vulnerability exists in RedisBloom that stems from the fact that an authenticated user can use specially crafted commands to trigger runtime assertions and terminate Redis...

PT-2024-20758

Name of the Vulnerable Software and Affected Versions RedisBloom versions 2.0.0 through 2.4.6 RedisBloom versions 2.6.0 through 2.6.9 Description RedisBloom adds a set of probabilistic data structures to Redis. Authenticated users can use the CF.RESERVE command to trigger a runtime assertion and...

CVE-2024-25115: Heap-based Buffer Overflow

RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, specially crafted CF.LOADCHUNK commands may be used by authenticated users to perform heap overflow, which may lead to remote code execution. The problem is fixed in...

CVE-2024-25116: Improper Input Validation

RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, authenticated users can use the CF.RESERVE command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in RedisBloom 2.4.7...