Non notée
CVE-2025-26413 Improper Input Validation vulnerability in Apache Kvrocks
Description
Improper Input Validation vulnerability in Apache Kvrocks. The SETRANGE command didn't check if the `offset` input is a positive integer and use it as an index of a string. So it will cause the server to crash due to its index is out of range. This issue affects Apache Kvrocks: through 2.11.1. Users are recommended to upgrade to version 2.12.0, which fixes the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Kvrocks 2.11 | premières → 2.11.1 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Kvrocks
Les 9 CVE de Apache Kvrocks →
CVE-2026-41566
Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kvrocks
9.4
Critique
CVE-2026-45188
Relative Path Traversal vulnerability in Apache Kvrocks
2.4
Faible
CVE-2026-46751
A vulnerability in Apache Kvrocks
5.5
Moyenne
CVE-2026-46752
Redis Lua HEAP overflow in cjson library vulnerability in Apache Kvrocks
10.0
Critique