CVE-2023-28856

Related Files

Gentoo Linux Security Advisory 202408-05

Posted Aug 7, 2024

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 202408-5 - Multiple vulnerabilities have been discovered in Redis, the worst of which may lead to a denial of service or possible remote code execution. Versions greater than or equal to 7.2.4 are affected.

tags | advisory, remote, denial of service, vulnerability, code execution

systems | linux, gentoo

advisories | CVE-2022-24834, CVE-2022-35977, CVE-2022-36021, CVE-2023-22458, CVE-2023-25155, CVE-2023-28425, CVE-2023-28856, CVE-2023-36824, CVE-2023-41053, CVE-2023-41056, CVE-2023-45145

SHA-256 | 44b89405ab5c4ee37e2bba62129744deb31752d4a37a6369ac2d9cd7a4c01629

Download | Favorite | View

Ubuntu Security Notice USN-6531-1

Posted Dec 6, 2023

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6531-1 - Seiya Nakata and Yudai Fujiwara discovered that Redis incorrectly handled certain specially crafted Lua scripts. An attacker could possibly use this issue to cause heap corruption and execute arbitrary code. SeungHyun Lee discovered that Redis incorrectly handled specially crafted commands. An attacker could possibly use this issue to trigger an integer overflow, which might cause Redis to allocate impossible amounts of memory, resulting in a denial of service via an application crash.

tags | advisory, denial of service, overflow, arbitrary

systems | linux, ubuntu

advisories | CVE-2022-24834, CVE-2022-35977, CVE-2022-36021, CVE-2023-25155, CVE-2023-28856, CVE-2023-45145

SHA-256 | 86bf06ce70285fd40bd6c61d977ae5a038cc5d7e43804cf355bef675f762bdeb

Download | Favorite | View