RedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference that leads to a server crash because it mishandles an unquoted string, such as an alias that has not yet been introduced.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HRedislabs Redisgraph
APPRedislabs2.0.0 – 2.2.11 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Powiązane podatności
CVE-2023-47003CRITICAL9.8ten sam produkt
An issue in RedisGraph v.2.12.10 allows an attacker to execute arbitrary code and cause a denial of service vi...
CVE-2023-47004HIGH8.8ten sam produkt
Buffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9 allows an attac...
CVE-2018-11219CRITICAL9.8ten sam vendor
An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4....
CVE-2018-11218CRITICAL9.8ten sam vendor
Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x befo...
CVE-2017-15047CRITICAL9.8ten sam vendor
The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-...