CVE-2021-31294

Katalog CVE

CVSS 5.9 · Medium EPSS 1,3%

Kerentanan Reachable Assertion pada redis. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command). NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this.

Rincian

Terbit di NVD

15 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 69,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/redis/redis/commit/46f4ebbe842620f0976a36741a72482620aa4b48 patch
• https://github.com/redis/redis/commit/6cbea7d29b5285692843bc1c351abba1a7ef326f patch
• https://github.com/redis/redis/issues/8712 exploit · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20230814-0007/