admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-merge PR#5502

Browse Source 
Auto-merge PR#5502
This commit is contained in:
CVE Team 2022-04-28 18:25:15 -04:00 committed by GitHub
commit 23a75a9e03
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
2022/24xxx/CVE-2022-24736.json
View File

@ -38,7 +38,7 @@
"description_data": [
{
"lang": "eng",
"value": "Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0, 6.2.X and 6.0.X. An additional workaround to mitigate this problem without patching the redis-server executable, if Lua scripting is not being used, is to block access to `SCRIPT LOAD` and `EVAL` commands using ACL rules."
"value": "Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0 and 6.2.7. An additional workaround to mitigate this problem without patching the redis-server executable, if Lua scripting is not being used, is to block access to `SCRIPT LOAD` and `EVAL` commands using ACL rules."
}
]
},
@ -72,6 +72,11 @@
},
"references": {
"reference_data": [
{
"name": "https://github.com/redis/redis/security/advisories/GHSA-3qpw-7686-5984",
"refsource": "CONFIRM",
"url": "https://github.com/redis/redis/security/advisories/GHSA-3qpw-7686-5984"
},
{
"name": "https://github.com/redis/redis/pull/10651",
"refsource": "MISC",
@ -86,11 +91,6 @@
"name": "https://github.com/redis/redis/releases/tag/7.0.0",
"refsource": "MISC",
"url": "https://github.com/redis/redis/releases/tag/7.0.0"
},
{
"name": "https://github.com/redis/redis/security/advisories/GHSA-3qpw-7686-5984",
"refsource": "CONFIRM",
"url": "https://github.com/redis/redis/security/advisories/GHSA-3qpw-7686-5984"
}
]
},