Aller au contenu
en Se connecter
7.0 Élevée

CVE-2024-25115 RedisBloom adds a set of probabilistic data structures to Redis

Description

RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, specially crafted `CF.LOADCHUNK` commands may be used by authenticated users to perform heap overflow, which may lead to remote code execution. The problem is fixed in RedisBloom 2.4.7 and 2.6.10.

Produits et versions touchés

Produit Versions touchées Corrigé en
RedisBloom 2.5 2.5.0 → < 2.6.10 2.6.10
RedisBloom 2.0 2.0.0 → < 2.4.7 2.4.7
redisbloom 2.5 2.5.0 → < 2.6.10 2.6.10

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de RedisBloom

Les 4 CVE de RedisBloom →
CVE-2026-25589 RedisBloom is a probabilistic data structures module for Redis 7.7 Élevée CVE-2024-55656 RedisBloom adds a set of probabilistic data structures to Redis 8.8 Élevée CVE-2024-25116 RedisBloom adds a set of probabilistic data structures to Redis 5.5 Moyenne
Suivre cette CVE