CVE-2021-32625

概要

参考情報

• redis/redis release 6.0.14 · Release Notes
• redis/redis release 6.2.4 · Release Notes
• redis/redis security advisory · Third Party Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BHWOF7CBVUGDK3AN6H3BN3VNTH2TDUZZ
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SN7INTZFE34MIQJO7WDDTIY5LIBGN6GI

redis のその他の脆弱性

• CVE-2020-21468高 7.5A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS). NOTE: the vendor cannot reproduce this…
• CVE-2021-32761高 7.5Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow e…
• CVE-2021-29478高 8.8Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow b…
• CVE-2021-29477高 8.8Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow b…
• CVE-2021-3470中 5.3A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jem…