FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2023-02-06 01:31:55 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
cc42db1c-c65f-11ec-ad96-0800270512f4	redis -- Multiple vulnerabilities Aviv Yahav reports: CVE-2022-24735 By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis can inject Lua code that will execute with the (potentially higher) privileges of another Redis user. CVE-2022-24736 An attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. Discovery 2022-04-27 Entry 2022-04-27 redis lt 6.2.7 redis-devel lt 7.0.0.20220428 redis62 lt 6.2.7 CVE-2022-24735 CVE-2022-24736 https://groups.google.com/g/redis-db/c/7iWUlwtoDqU

VuXML ID

Description

cc42db1c-c65f-11ec-ad96-0800270512f4

redis -- Multiple vulnerabilities

Aviv Yahav reports:

CVE-2022-24735

By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis can inject Lua code that will execute with the (potentially higher) privileges of another Redis user.

CVE-2022-24736

An attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process.

Discovery 2022-04-27
Entry 2022-04-27
redis

lt 6.2.7

redis-devel

lt 7.0.0.20220428

redis62

lt 6.2.7

CVE-2022-24735
CVE-2022-24736
https://groups.google.com/g/redis-db/c/7iWUlwtoDqU