PT-2021-6491 · Redis+1 · Redis+1

Chijinz · Published 2021-09-20 · Updated 2024-08-04 · CVE-2020-21468

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Redis versions 5.0.7

Description The issue is related to a segmentation fault in the redis-server component of Redis, which can lead to a denial of service (DOS). This can be exploited by a remote attacker to cause a service disruption. The vendor has noted that they cannot reproduce this issue in released versions, such as 5.0.7.

Recommendations For Redis version 5.0.7, consider applying configuration changes to minimize the risk of exploitation, such as restricting access to the redis-server component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2022-01741

CVE-2020-21468

Affected Products

Debian

Redis

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2020-21468 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-21468 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-01741 · Security Note
• https://osv.dev/vulnerability/CVE-2020-21468 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-21468 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-21468 · Security Note
• https://ubuntu.com/security/CVE-2020-21468 · Vendor Advisory
• http://redis.com · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-21468 · Vendor Advisory
• https://github.com/redis/redis/issues/6633 · Note
• https://github.com/antirez/redis/issues/6633 · Note
• https://t.me/cibsecurity/29125 · Telegram Post
• https://t.me/cvenotify/89005 · Telegram Post
• https://t.me/cvenotify/21499 · Telegram Post
• https://t.me/cvenotify/21575 · Telegram Post