PT-2024-20758
CVE-2024-25116
·
تاريخ النشر
2024-04-09
·
تاريخ التحديث
2024-04-10
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
RedisBloom versions 2.0.0 through 2.4.6
RedisBloom versions 2.6.0 through 2.6.9
Description
RedisBloom adds a set of probabilistic data structures to Redis. Authenticated users can use the
CF.RESERVE command to trigger a runtime assertion and termination of the Redis server process.Recommendations
For RedisBloom versions 2.0.0 through 2.4.6, update to version 2.4.7 to resolve the issue.
For RedisBloom versions 2.6.0 through 2.6.9, update to version 2.6.10 to resolve the issue.
As a temporary workaround, consider restricting access to the
CF.RESERVE command until a patch is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾