redis, fedoraproject fedora, netapp management services for element software +2 lainnya
CVSS 5.5 · Medium EPSS 1,5%
Kerentanan NULL Pointer Dereference pada redis, fedoraproject fedora +3 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.
Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0 and 6.2.7. An additional workaround to mitigate this problem without patching the redis-server executable, if Lua scripting is not being used, is to block access to `SCRIPT LOAD` and `EVAL` commands using ACL rules.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| redis | redis | Semua versi sebelum 6.2.7 |
| redis | redis | Versi 7.0 rc1 |
| redis | redis | Versi 7.0 rc2 |
| redis | redis | Versi 7.0 rc3 |
| fedoraproject | fedora | Versi 34 |
| fedoraproject | fedora | Versi 35 |
| fedoraproject | fedora | Versi 36 |
| netapp | management services for element software | Semua versi |
| netapp | management services for netapp hci | Semua versi |
| oracle | communications operations monitor | Versi 4.3 |
| oracle | communications operations monitor | Versi 4.4 |
| oracle | communications operations monitor | Versi 5.0 |