PatchFirst · Свежие уязвимости
За последние 30 дней в redis опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 2
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.
Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command). NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.