Remote Code Execution (RCE)

2023-08-0616:37:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

remote code execution

redis

vulnerability

key handling

arbitrary code

0.002 Low

EPSS

Percentile

61.1%

JSON

redis is vulnerable to Remote Code Execution (RCE). This vulnerability occurs due to a flaw in the way that Redis handles key names. An attacker can exploit this vulnerability to cause Redis to crash or to execute arbitrary code.

CPENameOperatorVersion
redis:sideq5:6.0.9-1
redis:sideq5:6.0.15-1
redis:sideq5:6.0.9-1
redis:sideq5:6.0.15-1
redis:edgeeq5.0.9-r0
redis:edgeeq6.2.6-r0
redis:edgeeq5.0.8-r0
redis:edgeeq6.0.1-r0
redis:edgeeq7.0.4-r0
redis:edgeeq7.0.10-r1

Name	Operator	Version
redis:sid	eq	5:6.0.9-1
redis:sid	eq	5:6.0.15-1
redis:sid	eq	5:6.0.9-1
redis:sid	eq	5:6.0.15-1
redis:edge	eq	5.0.9-r0
redis:edge	eq	6.2.6-r0
redis:edge	eq	5.0.8-r0
redis:edge	eq	6.0.1-r0
redis:edge	eq	7.0.4-r0
redis:edge	eq	7.0.10-r1