Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Redis vulnerable to integer overflow in certain payloads
Vulnerability Description
Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
不匹配的内存管理例程
Vulnerability Title
redis 安全漏洞
Vulnerability Description
Redis Labs Redis是美国Redis Labs公司的一套开源的使用ANSI C编写、支持网络、可基于内存亦可持久化的日志型、键值（Key-Value）存储数据库，并提供多种语言的API。 redis 7.2.4之前、7.0.15之前版本存在安全漏洞，该漏洞源于 sdsResize中存在堆缓冲区溢出，可能导致远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A