Denial Of Service (DoS)

🗓️ 05 May 2022 02:25:47Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 29 Views

Redis vulnerability to denial of service due to Lua script causing NULL pointer dereference

Reporter	Title	Published	Views	Family All 145
IBM Security Bulletins	Security Bulletin: IBM QRadar Advisor With Watson App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	30 May 202318:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Redis affect IBM Event Streams (CVE-2022-24736, CVE-2022-24735)	30 Sep 202213:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected but not considered vulnerable to multiple vulnerabilities	26 Mar 202504:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	29 Jan 202520:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Redis affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift (CVE-2022-24736, CVE-2022-24735)	13 Dec 202215:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway affected by vulnerabilities in Redis	29 Jul 202220:03	–	ibm
Tenable Nessus	Amazon Linux 2022 : redis6, redis6-devel (ALAS2022-2022-115)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : redis6, redis6-devel (ALAS2022-2022-199)	5 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : redis6, redis6-devel (ALAS2023-2023-064)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : redis (ALASREDIS6-2023-003)	27 Sep 202300:00	–	nessus

Vulners

Node

redis redisMatch6.2.5-r0os

AND

redis redisMatch6.2.4-r0os

AND

redis redisMatch6.2.6-r0os

AND

alpinelinux alpine_linuxMatch3.14

redis redisMatch6.2.6-r0os

AND

alpinelinux alpine_linuxMatch3.15

redis redisMatch5.0.9-r0os

AND

redis redisMatch6.2.6-r0os

AND

redis redisMatch6.2.5-r0os

AND

redis redisMatch5.0.7-r0os

AND

redis redisMatch6.2.1-r0os

AND

redis redisMatch6.2.3-r0os

AND

redis redisMatch5.0.8-r0os

AND

redis redisMatch6.0.1-r0os

AND

redis redisMatch6.2.4-r0os

AND

alpinelinux alpine_linuxMatchedge

redis redisMatch6.2.6-r0os

AND

alpinelinux alpine_linuxMatch3.16

redis redisMatch5:6.0.9-1debian

AND

redis redisMatch5:6.0.15-1debian

AND

debian debian_linuxMatch999

Source	Link
secdb	www.secdb.alpinelinux.org/v3.15/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.14/main.yaml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/J4ZK3675DGHVVDOFLJN7WX6YYH27GPMK/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J4ZK3675DGHVVDOFLJN7WX6YYH27GPMK/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/VPYKSG7LKUJGVM2P72EHXKVRVRWHLORX/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VPYKSG7LKUJGVM2P72EHXKVRVRWHLORX/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WSTPUCAPBRHIFPSCOURR4OYX4E2OISAF/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSTPUCAPBRHIFPSCOURR4OYX4E2OISAF/
security	www.security.gentoo.org/glsa/202209-17

07 Nov 2023 22:18Current

2.6Low risk

Vulners AI Score2.6

CVSS 3.13.3 - 5.5

CVSS 22.1

EPSS0.01725