CVE-2024-51480
RedisTimeSeries Integer Overflow Remote Code Execution Vulnerability
概要
RedisTimeSeries Integer Overflow Remote Code Execution Vulnerability
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MREVRANGE by an authenticated user, using specially crafted command arguments may cause an integer overflow, a subsequent heap overflow, and potentially lead to remote code execution. This vulnerability is fixed in 1.6.20, 1.8.15, 1.10.15, and 1.12.3.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov