Remote Code Execution (RCE)

🗓️ 06 May 2021 04:01:47Reported by Veracode Vulnerability DatabaseType

Redis remote code execution vulnerability due to integer overflo

Reporter	Title	Published	Views	Family All 61
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Redis may affect IBM Robotic Process Automation for Cloud Pak	27 Jun 202319:31	–	ibm
IBM Security Bulletins	Security Bulletin: Redis vulnerabilites impacting Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint 4.0 and earlier (CVE-2021-29477, CVE-2021-29478)	4 Jun 202116:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.14.0 ESR + CVE-2021-29967) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF14	28 Sep 202116:45	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilities in Redis affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	22 Jun 202209:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	6 Oct 202204:10	–	ibm
BDU FSTEC	The vulnerability of the Redis database management system, related to writing beyond the buffer in memory, allows a attacker to perform arbitrary operations.	19 May 202100:00	–	bdu_fstec
CNNVD	Redis Labs Redis 输入验证错误漏洞	4 May 202100:00	–	cnnvd
CVE	CVE-2021-29478	4 May 202116:00	–	cve
Cvelist	CVE-2021-29478 Vulnerability in the COPY command for large intsets	4 May 202116:00	–	cvelist
Debian CVE	CVE-2021-29478	4 May 202116:00	–	debiancve

Vulners

Node

redis redisMatch5:6.0.9-1debian

AND

redis redisMatch5:6.0.9-1debian

AND

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-29478
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZJ6JGQ2ETZB2DWTQSGCOGG7EF3ILV4V/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/EZJ6JGQ2ETZB2DWTQSGCOGG7EF3ILV4V/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPWBIZXA67JFIB63W2CNVVILCGIC2ME5/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/BPWBIZXA67JFIB63W2CNVVILCGIC2ME5/
security	www.security.gentoo.org/glsa/202107-20
github	www.github.com/redis/redis/security/advisories/GHSA-qh52-crrg-44g3
redis	www.redis.io/

07 Nov 2023 22:57Current

3.1Low risk

Vulners AI Score3.1

CVSS 3.17.5 - 8.8

CVSS 26

EPSS0.03652