Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2021-29469 →
DEBIAN-CVE-2021-29469
Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages cou...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings. This issue could lead to a denial of service. The issue is patched in version 3.1.1.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
node-redis
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2+~cs5.18.1-3"}]}]
Debian:13
node-redis
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2+~cs5.18.1-3"}]}]
Debian:14
node-redis
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2+~cs5.18.1-3"}]}]
Références
- advisory security-tracker.debian.org