Denial Of Service (DoS)

2023-03-1217:07:08

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

redis

vulnerability

dos attack

string matching commands

0.0004 Low

EPSS

Percentile

9.0%

JSON

Redis is vulnerable to Denial Of Service (DoS). An authenticated attacker can use string matching commands (like SCAN or KEYS) with a specially crafted pattern to trigger a denial of service attack on the system

CPENameOperatorVersion
redis:sideq5:6.0.9-1
redis:sideq5:6.0.15-1
redis:bustereq5:5.0.3-4+deb10u2
redis:bustereq5:5.0.3-4+deb10u3
redis:sideq5:6.0.9-1
redis:sideq5:6.0.15-1
redis:bustereq5:5.0.3-4+deb10u2
redis:bustereq5:5.0.3-4+deb10u3

Name	Operator	Version
redis:sid	eq	5:6.0.9-1
redis:sid	eq	5:6.0.15-1
redis:buster	eq	5:5.0.3-4+deb10u2
redis:buster	eq	5:5.0.3-4+deb10u3
redis:sid	eq	5:6.0.9-1
redis:sid	eq	5:6.0.15-1
redis:buster	eq	5:5.0.3-4+deb10u2
redis:buster	eq	5:5.0.3-4+deb10u3