PT-2023-6897 · Redis · Redisgraph
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
RedisGraph versions 2.x through 2.12.8
Description
The issue is related to a buffer overflow in the RedisGraph database, which can be exploited by a remote attacker to execute arbitrary code after valid authentication. This can occur due to the code logic allowing an operation to exceed memory buffer boundaries.
Recommendations
For versions 2.x through 2.12.8, update to version 2.12.9 to resolve the issue.
Exploit
Correção
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Redisgraph